release: v0.1.0 — the initial release

- CHANGELOG: the 0.1.0 entry finalized for publish — the alkcall
  0.8.1 / alktunnels 0.2.1 bumps and the fuzzing adoption folded in
  (the crate is unpublished, so no separate hardening cut — the
  alktunnels 0.2.1 precedent only applies post-publish); the fuzz/
  workspace bullet added (three targets, 129 seeds, corpus-replay
  gate, campaigns clean)
- README: the Version 0.1 note aligned (alkcall 0.8.1 — the
  duplicate-adopt fix is directly relevant to the consumer open/adopt
  paths; alktunnels 0.2.1; the fuzz posture noted)
- docs/architecture/overview.md: dep tree 0.8.1 / 0.2.1

Verification: cargo test (376 default / 638 all-features), fuzz/shared
corpus replay (3 pass), clippy --all-targets -D warnings (default,
all-features, wasm32-unknown-unknown), fmt --check, doc, wasm32 check,
and cargo publish --dry-run --allow-dirty all green (64 packaged
files — fuzz/, docs/research|reviews|plans/, tasks/, .opencode/,
AGENTS.md all excluded)

README.md

@@ -215,12 +215,16 @@ default build is wasm-clean by construction.
 
 ## Version 0.1
 
-The first release rides alkcall 0.8.0 (the establisher reply
-projection is not consumed yet — the open op's params are trivial) and
-alktunnels 0.2.0 (the direct op + the bind-first/forwarded flow power
-the composed providers). Wire-stable surface: the `alk/socks5` ALPN,
-the `channels/socks5/sub` open op with `{}` params, and the two scope
-constants — all pinned by ADRs 001–014.
+The first release rides alkcall 0.8.1 (the establisher reply
+projection is not consumed yet — the open op's params are trivial;
+the 0.8.1 duplicate-adopt fix is directly relevant to the consumer
+open/adopt paths) and alktunnels 0.2.1 (the direct op + the
+bind-first/forwarded flow power the composed providers). The
+`fuzz/` workspace (excluded from the published package) fuzzes the
+two attacker-reachable parser classes — the ASSOCIATE datagram codec
+and the RFC 1928 handshake state machine. Wire-stable surface: the
+`alk/socks5` ALPN, the `channels/socks5/sub` open op with `{}` params,
+and the two scope constants — all pinned by ADRs 001–014.
 
 ## Verification