docs: prepare v0.0.1 changelog #10

Job	Run time
Semgrep (SAST)	28s
Trivy (filesystem scan)	11s
Gitleaks (secret scan)	7s
jscpd (duplication < 5% on production Go)	15s
OSV-Scanner (SCA)	6s
SBOM (SPDX + CycloneDX)	13s
	1m 20s

Provide feedback