v0.9.1 - **Fixed:** retry jitter now draws from `crypto/rand` instead of a predictable pseudo-random source. - Development and CI commands now run in a pinned Docker image. `make sec` runs `govulncheck` and Semgrep, then writes the combined SARIF report used by the CI security upload.