release: v0.1.0 — one-click install, keyless boot, in-app Provider Settings (#142)

The first formal release.

- One-click install via Pinokio; keyless boot lands on a live Esri World
  Imagery satellite globe with keyless terrain, with automatic OSM fallback
  and graceful degradation when terrain is unavailable.
- Provider Settings (the POWER UP panel): add, replace, or remove API keys
  inside the app; credential files made owner-only before any secret is
  written; external keys shown read-only; the panel refuses shared or proxied
  servers.
- Keyless capability responses for the optional HUD summary and place search.
- Aircraft-identity voice answers cover operator, type, and route, and say so
  plainly when enrichment is unavailable.
- README rewritten keyless-first; concise 0.1.0 changelog section; CI
  workflow included.

Gates: 2,672 unit tests pass / 0 fail, build clean, tracking regression
108/108, map-source tray QA pass, setup doctor ready.

src/loadingFeedback.js

@@ -44,12 +44,7 @@ function terminalFromParticipantStats(summary, participantIds) {
   if (!participantIds?.length) return null;
   const participants = new Set(participantIds);
   return summary.records.some((record) => participants.has(record.id)
-    // A deliberately unconfigured optional provider is a truthful terminal
-    // state for that row, not a failed multi-layer mission. The layer keeps
-    // owning its KEY REQUIRED copy; explicit lifecycle failure events still
-    // merge in below and retain error priority.
-    && !record.keyRequired
-    && (record.error || record.unavailable))
+    && (record.error || record.unavailable || record.keyRequired))
     ? 'error'
     : null;
 }