v0.1.1 feat: implement rehearsal workspace design

[seonghobae]

Summary

• Implemented rehearsal workspace design (Issue Epic: Harmonic & Melodic Analysis (Chords & Pitch) #107)
• Added capo and tuning detection heuristics (Issue feat(analysis-engine): add capo and tuning detection heuristics #103)
• Added bandit security scan workflow
• Fixed missing docstrings, ruff formatting, and test configurations
• Addressed CodeQL, Trivy, and Bandit findings

Test Coverage

All new code paths have test coverage.
Python backend coverage is exactly 100%. Node frontend coverage is 100%.

Pre-Landing Review

No issues found. Security checks and quickcheck passed.

Scope Drift

Scope Check: CLEAN

Plan Completion

[DONE] Update Security Notes in Rollout Plan
[DONE] Package macOS and Windows artifacts (Desktop constraints applied)
[DONE] E2E Testing configuration via local dev server

Verification Results

Plan verification: PASS. All 138 python tests and 40 node tests passed locally.

TODOS

No TODO items completed in this PR.

Test plan

• All React/Vitest tests pass (40 tests)
• All Python/Pytest tests pass (138 runs, 0 failures)

🤖 Generated with Claude Code

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: 874f5641-f34e-409d-993a-adc4b72efc68

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch feature/issue-107-harmonic-pitch

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}