Exclude .DS_Store from tracked files (cherry-picked from PR #4)

Harden verify_install against path traversal, null hashes, symlinks

Harden CI: SHA-pin checkout action, add trailing newline to checksums

Fix stale checksums.json and add CI verification

Clean up PR #1 merge: remove dead code, simplify run_scanner

Merge pull request #1 from MaTriXy/codex/fix-json-output

Tighten JSON scanner output contract

Refactor JSON aggregation into standalone script

Fix invalid JSON output in run_forensics

fix: add litellm 1.82.7 to compromised versions, add sysmon.py persistence check

fix: balance pipeline diagram to 9+9 scanner grid

fix: update pipeline + threats SVGs to show 18 scanners and 18 rules

chore: bump version to 2.2.0

fix: update SVG diagrams from 17 to 18 scanners

fix: update example output to show 18 scanners