v1.0.1: CI-Hardening – Container-Image, SBOM, Dependency-Scanning, openCode Badges