release: prepare v1.2.0 changelog and version bump

Merge pull request #4 from rafabd1/feat/finding-severity-risk-levels

chore(risk): classify stripe test secret key as informative

fix(session-token): reduce referenceId false positives and set risk to low

feat(risk): add finding severity levels and risk metadata in outputs

Merge pull request #3 from rafabd1/fix/networking-reliability-hardening

fix(docs): update usage documentation for TLS verification flag and default behavior

fix(docs): enhance rate-limit handling details and clarify HTTP status reporting

fix(patterns): update regex for huggingface_api_token to ensure word boundaries

fix(networking): strict 429 handling, explicit status logs, and safer discard semantics

feat(networking): adaptive 429 backoff with safe domain discard

fix(networking): harden retries, domain blocking, and error accounting

docs(usage): refresh CLI guide for v1.1.0 flags and workflows

Merge pull request #2 from rafabd1/1.1.0

docs(changelog): highlight Shannon entropy and hybrid scoring updates