v0.0.2: durable source provenance, release hardening, and dark mode

[drdeepaksatheesh]

Implements issue #3 and the requested release-hardening/dark-mode pass.

Source provenance

• replaces the v0.0.1 fast UI fingerprint with full-document SHA-256
• hashes normalized selected quotes with SHA-256
• upgrades source anchors to schema version 2
• restores stored ranges directly and falls back to normalized quote search when PDF.js text-item boundaries shift
• introduces a versioned document-sidecar data model and JSON schema
• persists sidecars as JSON in the Tauri application-data directory, keyed by document SHA-256 (browser fallback uses localStorage only for dev)
• adds sidecar + source-anchor regression tests

Product/UI

• adds persistent Light/Dark mode without altering the rendered PDF itself
• exposes truncated document/quote provenance hashes and saved-source count
• bumps application version to 0.0.2

Release hardening

• pins direct npm dependency versions
• upgrades Vite/Vitest past audited advisories
• enforces version consistency across package.json / Tauri config / Cargo.toml
• removes the Tauri bundle identifier .app warning
• validates that exactly one NSIS installer is produced and is plausibly sized
• writes SHA-256 checksum manifest for the installer
• uploads installer + checksum together
• adds RELEASE_CHECKLIST.md
• records the provenance architecture in ADR 0001

CI evidence

GitHub Actions run 34918868827: PASS.

• version consistency: PASS
• source-anchor + sidecar tests: 9/9 PASS
• production web build: PASS
• critical npm dependency audit: PASS
• Windows Tauri/NSIS build: PASS
• installer validation + checksum generation: PASS
• installer artifact upload: PASS

Validated installer:

• Open Document Understanding_0.0.2_x64-setup.exe
• 2,330,634 bytes
• SHA-256: d950b329c9d937e80c7840be39f29418736ca939bd06e79cc2818e11b1bc0545

Remaining exit criterion for issue #3

A clean-machine GUI test of v0.0.2 must still confirm durable sidecar restoration and persistent dark mode. Issue #3 remains open until that evidence exists.