v0.2.2 — tab-aligned tables, and 89.23% -> 94.18%

Three general parser fixes:

- A tab counts as a column gap. `mokutil --help` was 38 flags / 0
  described with the descriptions plainly present; now 38 at 100%. Also
  recovers 11 real commands for mysqladmin/mariadb-admin.
- A second column of option *spellings* is not a description. `awk --help`
  would otherwise have reported 28 flags, 100% described, every description
  a lie.
- A positional documented as the first row of an options table no longer
  discards the table. `kill` goes 0 -> 6 flags at 100%.

Records [M-14]: what a man-page tier would recover, measured rather than
assumed.

v0.2.1 — the empty argument that actually reset a machine, and `-h` t…

…hat would have

Fixes `<tool> -- ""`, measured terminating every process in a PID namespace
via `pkill -- ""`, and emitted at every tool on PATH. Refused now at the
exec chokepoint for all tools rather than hidden behind a thirteen-name list.

Removes the clap CompleteEnv probe, which produced that argv and never
identified a real clap tool.

Restricts process-signalling and machine-state tools to exactly `--help`
instead of banning them: `-h` was measured *attempting the real operation*
on halt/poweroff/reboot/shutdown. Eleven tools gain real flag lists;
no-tier 14 -> 2, described 89.19% -> 89.23%.

v0.1.4 — safety release

mandible no longer executes programs whose purpose is to kill processes.
'mandible pkill' froze a user's machine into a reset; kill, pkill,
killall, fuser, reboot, shutdown and friends are now refused before
anything is spawned, under every argument shape.

--help being harmless on one build is not enough: the argument shapes
mandible uses include '<tool> <word> --help', and for these programs the
first positional is a target, not a subcommand.

Also stops reporting 0% confidence on every git subcommand, where the
verbatim man-page fallback was working as designed.

v0.1.3

Version-manager shims resolve their toolchain again: 'mandible cargo'
showed rustup's error instead of cargo's help, because shims find their
target through $HOME and the probe sandbox redirects it. Toolchain
variables now pass through while HOME stays redirected.

Also reconciles two spec claims with what was actually built, and stops
the coverage sweep reporting an infrastructure limit as a build failure.

v0.1.2

The detail pane reads as documentation: flag descriptions and value
placeholders in aligned columns, ruled section headings, the usage line
as a signature block, and flag groups in the tool's own order.

Provenance moved out of the per-command footer, where every part of it
was identical on every node, and low confidence is finally surfaced —
find scores 11% and used to report itself as fine.

An ASCII fallback for every glyph, so it holds up in a non-UTF-8
terminal, enforced by a test that renders a full frame.

And 'mandible mandible' animates its wordmark.

v0.1.1

Parser and UI fixes found by using 0.1.0 on real tools.

apt-get returns its 17 real subcommands with descriptions, busybox its
270 applets, and openssl's 151 genuine commands are no longer flagged as
suspect. Name-mode search filters literally, rows surfaced by a flag say
which flag, and the status bar stops advertising 'q quit' while q types
the letter q.