chore(main): release 1.5.4

[alxxjohn]

🤖 I have created a release beep boop

1.5.4 (2026-08-19)

Bug Fixes

• bound waiver audit history reads (4ecb4da)
• cap rule stats history reads (8aa4345)
• detect zero HTTP client timeouts (c664c33)
• parser: make Python call extraction linear (e3dd6d4)
• parser: make Python call extraction linear (#140) (0970150)
• quality: bound AI provenance git output (#139) (dc17db9)
• quality: cap git provenance output (8e95804)
• reject unsafe typeof null guards (e2f552e)
• reliability: bound zero timeout detection (e838116)
• scope nullable block guards to their bodies (fcb3023)
• security: avoid retaining dynamic regexes (1a55a38)
• security: avoid retaining dynamic regexes (#145) (3b6aa51)
• security: bound git history secret scans (3fa7c09)
• security: bound git-history parsing to prevent DoS (#146) (d0eb42f)
• use errors.Is for bounded history reads (b5076ff)

---

This PR was generated with Release Please. See documentation.

[alxxjohn]

🤖 Created releases:

• v1.5.4

🌻