rooms v0.1.0 — first public release

Disposable Firecracker microVMs with specified deps. v0 POC substrate:
boot a microVM from a prebuilt rootfs, SSH in, run a single --command,
propagate exit code, shut down. Outbound HTTPS from inside the guest
verified via m4 (Anthropic API curl).

Productionization landed in batches 1-3 of going-public:
- Operator-personal paths scrubbed from spec docs
- CI matrix (ubuntu-latest + windows-latest) + cargo-audit
- workflow_dispatch coverage (cargo-llvm-cov) + mutants (cargo-mutants)
- Community files: CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md,
  CHANGELOG.md, .github/ISSUE_TEMPLATE/*, PULL_REQUEST_TEMPLATE.md
- Test depth: proptest coverage + subprocess CLI integration tests
- README badges (CI + license); doctor row reflects shipped state