release: v0.1.0 — one-click install, keyless boot, in-app Provider Settings (#142)

The first formal release.

- One-click install via Pinokio; keyless boot lands on a live Esri World
  Imagery satellite globe with keyless terrain, with automatic OSM fallback
  and graceful degradation when terrain is unavailable.
- Provider Settings (the POWER UP panel): add, replace, or remove API keys
  inside the app; credential files made owner-only before any secret is
  written; external keys shown read-only; the panel refuses shared or proxied
  servers.
- Keyless capability responses for the optional HUD summary and place search.
- Aircraft-identity voice answers cover operator, type, and route, and say so
  plainly when enrichment is unavailable.
- README rewritten keyless-first; concise 0.1.0 changelog section; CI
  workflow included.

Gates: 2,672 unit tests pass / 0 fail, build clean, tracking regression
108/108, map-source tray QA pass, setup doctor ready.

src/data/localGeojson.js

@@ -51,7 +51,7 @@ const DEFAULT_OVERLAY_HOST = Object.freeze({
 });
 
 /**
- * Build the validated local-infrastructure card copy.
+ * Build the owner-approved local-infrastructure card copy.
  * @param {object} properties Unwrapped GeoJSON feature properties.
  * @param {string} layerId Local layer id.
  * @returns {{title:string,details:string[]}}
@@ -317,7 +317,7 @@ export function createLocalGeoJsonLayer({
    * camera is parked. One timer for the whole layer (not per record) — the
    * retry pass walks every record anyway. (perf rebase 2026-08-17)
    *
-   * Two gates keep this from becoming an idle leak (second review):
+   * Two gates keep this from becoming an idle leak (review round 2):
    *   - CAPABILITY: without `scene.sampleHeightSupported` the sample can never
    *     succeed, so a timer here would re-arm on every requested frame,
    *     forever. Records simply stay at ellipsoid height — exactly the