release: v0.1.0 — one-click install, keyless boot, in-app Provider Settings (#142)

The first formal release.

- One-click install via Pinokio; keyless boot lands on a live Esri World
  Imagery satellite globe with keyless terrain, with automatic OSM fallback
  and graceful degradation when terrain is unavailable.
- Provider Settings (the POWER UP panel): add, replace, or remove API keys
  inside the app; credential files made owner-only before any secret is
  written; external keys shown read-only; the panel refuses shared or proxied
  servers.
- Keyless capability responses for the optional HUD summary and place search.
- Aircraft-identity voice answers cover operator, type, and route, and say so
  plainly when enrichment is unavailable.
- README rewritten keyless-first; concise 0.1.0 changelog section; CI
  workflow included.

Gates: 2,672 unit tests pass / 0 fail, build clean, tracking regression
108/108, map-source tray QA pass, setup doctor ready.

src/data/geoid.js

@@ -5,14 +5,15 @@
 // Caltrans/TfL camera priors) give ORTHOMETRIC height (H, "height above mean
 // sea level"). N is the local geoid undulation — the gap between the WGS84
 // ellipsoid and the geoid (~mean sea level) surface, ranging roughly
-// -106..+85 m worldwide. See docs/CURRENT-STATE.md.
+// -106..+85 m worldwide. See docs/plans/2026-07-05-entity-height-datum-fix.md.
 //
-// The implementation uses `egm96-universal` (npm, MIT, embeds the NGA
+// Decision rule (task brief): try `egm96-universal` (npm, MIT, embeds the NGA
 // EGM96 15' grid) as a lazy dynamic import so its ~2.7 MB grid data-chunk
 // never lands in the eager Vite bundle. Only fall back to vendoring the NGA
 // grid ourselves if the package fails tests, isn't browser-safe, or bloats
-// the eager bundle. It passed the browser-safety, accuracy, and bundle checks,
-// so this file is a thin wrapper around it — no vendored fallback is needed.
+// the eager bundle. `egm96-universal` passed all three checks (see the
+// task report), so this file is a thin wrapper around it — no vendored
+// fallback was needed.
 //
 // egm96-universal's `meanSeaLevel(lat, lon)` already returns exactly N in
 // metres (relative to WGS84 ellipsoid) with internal longitude