docs: expand CHANGELOG with Unreleased section

Documents all changes since v0.1.1: MCP integration, CLI tests, npm wrapper, CI hardening, branding updates, dependabot bumps, and fixes.

Author: Coding-Dev-Tools

CHANGELOG.md

@@ -5,12 +5,42 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [0.1.0] - 2025-05-17
+## [Unreleased]
 
 ### Added
-- Initial beta release
-- Core functionality
-- CLI interface
-- Test suite
-- CI/CD workflows with ruff lint and pytest
-- CONTRIBUTING.md
+
+- MCP server integration via `mcp` subcommand
+- `__main__.py` for `python -m deadcode` support
+- CLI test suite covering all subcommands
+- npm wrapper (`package.json` + `cli.js`) for npm publishing
+- GitHub Actions: npm publish workflow (release or manual dispatch)
+- GitHub Actions: PyPI publish workflow
+- GitHub Actions: GitHub Pages deployment workflow
+- `CONTRIBUTING.md` with development setup and PR guidelines
+- `SECURITY.md` with security policy
+- Homebrew and Scoop install methods
+- Directory listing badges: Open Source Alternative, LibHunt, Awesome Python
+- `revenueholdings-license` gating on all CLI commands
+- Beta badge and star CTA in README header
+- npm keywords optimized for discoverability (15 terms)
+
+### Changed
+
+- npm package renamed for consistency
+- CI test matrix expanded to include Python 3.13
+- CI security hardened: `persist-credentials: false`, restricted permissions
+- Documentation branding updated from DevForge to Revenue Holdings
+- README tool count updated (8 → 11)
+- `project.urls` metadata added to `pyproject.toml`
+
+### Fixed
+
+- CI badge updated to reference correct workflow file
+- UTF-8 encoding (mojibake) in file output
+- Ruff lint issues: `datetime.UTC`, `X | None` syntax, `E501`, `B904`, `F821`
+- Missing `ruff` dev dependency in `pyproject.toml`
+- Duplicate `test.yml` workflow removed
+- `revenueholdings-license` import made optional (fixes CI failures on open-source PRs)
+- Dependencies bumped via Dependabot (checkout@v6, setup-node@v6, setup-python@v6, rich, pyyaml)
+- Orphaned npm install section removed from README
+- Scanner category count corrected (3 → 4)