release: v0.1.0 — one-click install, keyless boot, in-app Provider Settings (#142)

The first formal release.

- One-click install via Pinokio; keyless boot lands on a live Esri World
  Imagery satellite globe with keyless terrain, with automatic OSM fallback
  and graceful degradation when terrain is unavailable.
- Provider Settings (the POWER UP panel): add, replace, or remove API keys
  inside the app; credential files made owner-only before any secret is
  written; external keys shown read-only; the panel refuses shared or proxied
  servers.
- Keyless capability responses for the optional HUD summary and place search.
- Aircraft-identity voice answers cover operator, type, and route, and say so
  plainly when enrichment is unavailable.
- README rewritten keyless-first; concise 0.1.0 changelog section; CI
  workflow included.

Gates: 2,672 unit tests pass / 0 fail, build clean, tracking regression
108/108, map-source tray QA pass, setup doctor ready.

src/data/localGeojson.test.mjs

@@ -149,7 +149,7 @@ async function createRealLocalLayerHarness({
   };
 }
 
-test('local infrastructure card copy uses the validated source fields', () => {
+test('local infrastructure card copy uses the owner-approved source fields', () => {
   assert.deepEqual(localInfrastructureOverlayCopy({
     tags: {
       name: 'DFW-1',
@@ -740,7 +740,7 @@ test('disable cancels a pending ground-retry render', async (t) => {
   );
 });
 
-// ── The retry must be able to STOP (second review) ───────────────────────────
+// ── The retry must be able to STOP (review round 2) ───────────────────────────
 //
 // The retry above arms itself off its own requested frame, so anything that
 // makes the sample permanently impossible turns it into a perpetual-motion