release: 0.2.0

[whykusanagi]

Summary

Release integration for corrupted-theme 0.2.0. Sub-projects #1–#4 + #6 already merged to main; this PR bumps versions, writes the CHANGELOG, generates SRI hashes, and prepares for `npm publish`.

Final release scope

• refactor: align corruption examples with theme.css design system (v0.1.5) #1 Canonical JSON — phrases/charsets/colors source-of-truth + AJV validation (PR feat(0.2.0 #1): canonical JSON source of truth — phrases/charsets/colors #15)
• chore: move internal planning docs to docs/planning/ #2 Drift Reconvergence — 5 modules ported, NSFW unified, .container redesigned (PR feat(0.2.0 #2): drift reconvergence — 5 new modules + NSFW unify + container redesign #16)
• release: v0.1.7 — Security, lifecycle, and new components #3 CDN Distribution — cdn.whykusanagi.xyz + cdn.nikkers.cc, Worker, KV pointer (PR feat(0.2.0 #3): CDN distribution via R2 + cdn.{whykusanagi.xyz,nikkers.cc} #17, LIVE)
• feat: add CorruptedVortex WebGL shader and CorruptedParticles background (v0.1.8) #4 Security / Dep Refresh — 0 vulnerabilities, deps current, threat model documented (PR chore(0.2.0 #4): security audit + dep refresh + CDN threat model #18)
• docs: add missing JS corruption component API docs #6 New Base Components — 14 components, Lightbox extraction, UMD build (PR feat(0.2.0 #6): 14 new base components + Lightbox extraction + UMD build #19)
• feat(vortex): Interstellar accretion disk, near/far depth split, version sync #5 Release Packaging (this PR) — integration

What's in this PR

• `package.json` bumped to `0.2.0`
• Version references swept across `index.html`, `examples/.html`, `docs/governance/.md`, `docs/platforms/NPM_PACKAGE.md`, `README.md`
• `CHANGELOG.md` — comprehensive 0.2.0 entry summarizing all 5 sub-projects' deliverables
• SRI hashes generated and pasted into CHANGELOG for CDN consumers

Test plan

• `npm version 0.2.0` applied cleanly
• No stale `0.1.9` version-references in production paths (historical refs in CLAUDE.md, SECURITY.md audit-trail, migration docs intentionally preserved)
• `npm run build` succeeds (`dist/theme.min.css` produced)
• `npm run build:umd` succeeds (`dist/timer-registry.global.js` produced)
• `npm run validate-data` clean (3/3 JSONs valid)
• `npm test` — 159/159 pass
• `npm pack --dry-run` — 109 files, 1.1MB packed, 2.1MB unpacked
• `npm run generate-sri` — SRI hashes captured in CHANGELOG

After merge

The following requires explicit human approval per CLAUDE.md §11 and §16, MEMORY.md, and plan #5 spec:

1. `npm publish --access public` (publishes to npm registry)
2. `CT_CDN_BUCKET=whykusanagi npm run publish-cdn` (uploads dist + JSON to R2, bumps @latest KV pointer to 0.2.0)
3. Post-publish smoke test (fresh install in temp dir)
4. File realignment tickets in downstream repos (celeste-tts-bot, celeste-cli, nikke, site) per the 2026-05-16 drift audit

🤖 Generated with Claude Code