chore: prepare v0.1.2 release

[seonghobae]

Summary

• Bump root release metadata to v0.1.2 and align the Tauri desktop bundle version.
• Add a release metadata regression test covering package-lock, Tauri, and changelog drift.
• Document the YouTube fallback and OSSF Scorecard release-branch fixes for v0.1.2.

Verification

• uv run --project services/analysis-engine pytest services/analysis-engine/tests/test_release_metadata.py
• ./scripts/harness/quickcheck.sh
• npm audit --workspaces --audit-level=high
• Downloaded build-baseline macOS arm64 artifact for 3175d3884a6e3ac17028f0d4508bacf6f95d0717, verified SHA256, mounted DMG, and launched BandScope.app successfully.

Security Notes

• No new runtime file, URL, subprocess, IPC, WebView, update, model, cache, or export surface is added.
• Release metadata guard reduces the chance of shipping installers with stale user-visible app versions.
• Existing unsigned/not-notarized macOS Gatekeeper warning remains until Apple signing/notarization credentials are configured.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: 05cca104-55c2-405e-92af-2d6446f7b294

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch release/v0.1.2

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}