docs: update README with --watch, --otel, threat classification, and AgentTrace companion link

feat: add violation classification with threat taxonomy and MITRE mapping

feat: add OTel span export via OTLP (--otel flag, optional 'otel' feature)

feat: add --watch flag for real-time trace streaming to stderr

ci: allow dry-run to exit non-zero (no API key in CI)

fix: resolve clippy warnings for CI

docs: add installation guide, platform support table, CI, roadmap

fix: correct exfil detection, add LICENSE, bump Rust to 1.93, update README

feat: MCP server for Claude Code/Cowork integration

feat: seccomp-bpf syscall filtering (enforcement layer #4)

feat: filesystem mount isolation (enforcement layer #3)

Fix iptables chain name length (must be <29 chars)

Update README with full documentation

Add Docker demo with real iptables enforcement

Add gitignore for build artifacts