feat: add PPTX export and M&A exit validation to pitch deck

fix: inline variant system into pitch deck HTML

fix: cache-bust variants.js to force fresh fetch

fix: add missing variants.js for pitch deck variant toggle

feat: add password gate to pitch deck

chore: gitignore .gemini/ directory

fix: clean up landing page for HN launch

docs: clean up public docs for launch — number-prefix, gitignore internal

chore: bump version to 1.2.0

fix: widen Landlock execute paths to include dynamic linker

fix: add execute/read paths to Landlock integration tests

docs: add Sandbox tab to landing page, remove Tetragon from shipped sandbox

ci: add Windows sandbox smoke test workflow

fix: Landlock available() check fails on kernels with ABI v1+

ci: add Linux Landlock sandbox smoke test workflow