fix: replace example AWS account ID with canonical 123456789012 (#32)

Co-authored-by: clap [bot] <clap@rampart.sh>

chore: v0.1.3 changelog (#29)

Co-authored-by: clap [bot] <clap@rampart.sh>

fix: split terminal raw mode into platform-specific files

syscall.TCGETS/TCSETS are Linux-only — darwin build failed in CI.
Split into terminal_linux.go, terminal_darwin.go, terminal_other.go.
darwin uses TIOCGETA/TIOCSETA ioctl constants instead.

chore: bump CHANGELOG for v0.1.1

v0.1.0 — initial public release

AI agent compromise detection via deception. Plants fake credentials where
agents actually look. When a compromised agent tries to use them, the credential
fires an instant alert — before the first API call.

Key features:
- 13 canary types: aws, awsproc, gcp, ssh, k8s, pypi, mcp, npm, openai, anthropic, github, stripe, generic
- awsproc fires at credential resolution via credential_process — before any AWS API call
- snare arm --webhook <url> — one command to arm 10 canaries
- snare arm --precision — awsproc, ssh, k8s only (near-zero false positives)
- Cloudflare Worker backend, webhook delivery to Discord/Slack/Telegram/PagerDuty/Teams
- Self-hosted mode: snare serve --dashboard-token <token>
- Apache 2.0