v2.0.0 — Copilot SDK, Agent Detection & Dark X-Ray

🚀 Major: Copilot SDK Integration

• New AI engine: Replaced MCP server architecture with GitHub Copilot SDK (@github/copilot-sdk). No more Docker containers or separate processes — the SDK runs directly inside the extension.
• Smart fallback chain: Copilot SDK → BYOK (bring your own key) → GitHub Models API → local-only analysis. If one tier is unavailable, the next kicks in automatically.
• Custom tools via defineTool + Zod: Five purpose-built tools the SDK agent uses to analyze repositories.
• Webpack ESM bundling: Solved @github/copilot-sdk being ESM-only with /* webpackIgnore: true */ on dynamic imports.

🤖 Agent & Bot Detection

• detectBot(name, email) helper: Identifies bot and agent contributors (Dependabot, Copilot, Renovate, etc.) from commit metadata.
• Visual distinction: Bot contributors get gray expertise bars and a 🤖 badge instead of the standard color scheme.
• Why it matters: As AI agents commit more code, you need to know which expertise is human and which is automated.

🎨 Dark X-Ray Redesign

• Exported reports: Complete visual overhaul — #0a0a0f background, cyan (#06b6d4) accent, CSS scan-line patterns, SVG bar charts.
• VS Code webview: Matching dark theme for the in-editor view, consistent with exported reports.

📖 Documentation

• README rewritten with Copilot SDK architecture section, flow diagram, fallback chain table.
• Hand-drawn architecture diagram replacing old ASCII version.
• Added SECURITY.md and FUNDING.yml.

🔧 Infrastructure

• Dropped Node 18 from CI (Node 20+ only).
• Security audit changed to --omit=dev --audit-level critical.
• CI PR comment script fix.

📦 Dependencies

• rollup 4.53.3 → 4.59.0
• minimatch 3.1.2 → 3.1.5
• axios 1.12.0 → 1.13.5
• webpack 5.99.9 → 5.105.0
• fastify 5.6.2 → 5.7.4