feat: CI/release workflows + fix ruff lint for v0.2.0

[Copilot]

Sets up the release infrastructure needed to cut v0.2.0 and ensures the codebase is lint-clean so CI gates pass.

Lint fixes (forscan_tools.py)

• UP035: typing.Iterable → collections.abc.Iterable
• UP042: class SafetyLevel(str, Enum) → class SafetyLevel(StrEnum) (Python 3.11+)
• E501 (×4): wrapped safety warning string, argparse description, and epilog examples within the 100-char limit

CI workflow (.github/workflows/ci.yml)

Runs ruff check, ruff format --check, and pytest on every push/PR to main. Job scoped to permissions: contents: read.

Release workflow (.github/workflows/release.yml)

Triggers on v*.*.* tags. Re-runs all checks as a gate, then publishes a GitHub Release via softprops/action-gh-release@v2 with a structured body covering all CLI commands and safety notes.

Cutting the release

Once merged, tag and push:

git tag v0.2.0
git push origin v0.2.0

The release workflow handles the rest.

Original prompt

---

This section details on the original issue you should resolve

<issue_title>Cut first tagged release for packaged project (v0.2.0 or v0.2.1)</issue_title>
<issue_description>## Summary
Create first official tagged release after packaging metadata and release process updates are complete.

Tasks

• Confirm final version (0.2.0 if unchanged, otherwise bump to 0.2.1).
• Ensure CI/tests/lint/build checks pass.
• Create git tag v<version> and push tag.
• Create GitHub Release with notes summarizing commands/features.

Acceptance Criteria

• Tag exists in repository.
• GitHub Release is published.
• (If PyPI workflow enabled) package published to PyPI.</issue_description>

Comments on the Issue (you are @copilot in this section)

• Fixes Cut first tagged release for packaged project (v0.2.0 or v0.2.1) #4

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.