release: v0.13.0 terminal usability and integration fixes

[peaktwilight]

Changes

• Responsive, scrollable, context-aware TUI help; literal question-mark search; global Ctrl+C; Home/End finding navigation; complete diff-target text entry.
• Fix real Coccinelle match markers and source-line reporting; preserve original source locations across diff context, replacements, and insertions.
• Strengthen live CodeQL/Coccinelle regressions; remove an obsolete intentionally panicking AST dump and replace release source-string assertions with executable safety checks.
• Make release preparation PR-first and fail closed on origin checks. Keep locked dependency resolution unchanged; verify Cargo.lock/tag alignment and build only published binaries with --locked.
• Prepare coherent v0.13.0 Cargo/npm/VS Code metadata and release notes. No tag or registry publish occurs until this PR is merged after checks.

Verification

• 1,624 regular Rust tests passed; strict all-target/all-feature Clippy and builds passed.
• All four optional runtime/benchmark tests passed with real CodeQL 2.27.0 and Coccinelle 1.1.1 installed. Two illustrative documentation snippets remain ignored.
• Actual TUI smoke at 80x24 and 40x12: 56 findings; Home/End 1/56 and 56/56; literal ? search; reachable/bounded help; Ctrl+C exits.
• Real Coccinelle before: no executable match marker, then wrong context line 8. After: only vulnerable.c:11, correct decrypt snippet; guarded control clean; source files unchanged.
• Real CodeQL created a C++ database and returned the expected main.c:1 finding.
• npm installer, VS Code, Claude Code hooks, action counts, Marketplace helper, 16 precision tests, 13 negative-control tests, and 58 held-out tests passed. Website builds 20 pages. Cargo and npm audits clean.
• Ran the actual release preparation script successfully in an isolated checkout. Cargo.lock is byte-identical after normalizing only the root package version. Existing unrelated worktrees were left untouched.

[github-actions]

✗ togi mutation report

45.0% mutation score — 9/20 killed, 0 survived, 11 timeout, 0 build errors — 844.90s