Updates to scanner

RELEASE_NOTES.md

@@ -0,0 +1,22 @@
+# PHPGuard 1.3.0 — Release Notes
+
+- Added read-only APT package provenance and candidate version inventory for PHP CLI and PHP-FPM packages.
+- Added package-origin visibility to server details and exported JSON reports.
+- Corrected the Docker PHP version probe.
+- Preserved compatibility with earlier stored scan results.
+- Updated build number to 4 and version to 1.3.0.
+- Retained the Debug build and signed/notarized DMG release scripts.
+
+## Limitations
+
+APT origin and version information **does not** establish whether a specific CVE is fixed. Ubuntu security backports, package provenance, and vendor advisories still require verification. The CVE Research tab lists keyword-search results, not confirmed server exposures. Scans are read-only and do not remediate systems.
+
+## Build on macOS
+
+`./Scripts/build.sh`
+
+## Release on macOS
+
+`NOTARY_PROFILE=orion-notary ./Scripts/release.sh`
+
+Requires Xcode, a Developer ID Application signing identity, and a configured notarytool keychain profile.