docs: Improve README, CLI UX, and documentation accuracy (#147)

## Summary

Overhaul user-facing documentation and CLI polish. Rewrites README with
badges and user-focused structure, fixes stale docs (wrong MSRV,
fictional CLI flags, incorrect exit codes), improves CLI UX from review
findings, and simplifies Mergify merge queue config.

**20 files changed** (452 additions, 633 deletions -- net reduction of
181 lines)

## What changed

### README rewrite
- Badge rows with link references at bottom (license, sponsors, CI,
deps, codecov, issues, last commit, scorecard) -- all `flat-square`,
modeled after libmagic-rs/dbsurveyor
- User-focused structure: Quick Start and Usage before contributor
content
- Merged duplicate Features sections, removed "Problem with strings" /
"Advantages Over" redundancy
- Added stdin support example, release verification, Security section

### Documentation fixes
- **`docs/src/installation.md`**: Fixed MSRV from 1.70 to 1.91, removed
fictional Docker section, added Releases page link, added `just` dev
workflow
- **`docs/src/performance.md`**: Complete rewrite -- removed 20+
fictional CLI flags (`--mmap-threshold`, `--no-mmap`, `--sections`,
`--timing`, `--no-classify`, etc.), fictional env vars
(`STRINGY_MAX_MEMORY`, `STRINGY_THREADS`), and fictional config format
- **`docs/src/cli.md`**: Fixed exit codes from 0/1/2 to 0/1/2/3/4
matching `StringyError::exit_code()`
- **`docs/src/quickstart.md`**: Added 4 missing tags to semantic tags
table (demangled, version, manifest, resource) -- now covers all 21 tags

### CLI improvements (from `/cli-review`)
- **Removed `-e` short flag** from `--enc` (infrequent flag per
GOTCHAS.md convention)
- **Added EXIT CODES section** to `--help` output (0=success, 1=general,
2=config, 3=not found, 4=permission denied)
- **Converted `cli_encoding_to_filter()`** to `impl From<CliEncoding>
for EncodingFilter` (idiomatic Rust)
- **Improved filter-no-match diagnostic**: now suggests adjusting
`--min-len`, `--only-tags`, `--no-tags`, or `--enc`

### Mergify simplification
- 3 queues: dosubot (quality only), dependabot (full CI), default
(manual `/queue` for human PRs)
- Removed label requirements (lgtm, do-not-merge), author restrictions,
and workflow file detection
- Auto-approve rules for both bots, keep-PRs-up-to-date rule retained

### Tests (7 new tests)
- `tests/integration_cli_stdin.rs` (6 tests): PE, Mach-O, unknown
format, JSON output, raw mode, and filtered mode via stdin
- `tests/integration_cli.rs`: exit codes help text validation
- `tests/integration_flow8_diagnostics.rs`: tightened filter-no-match
assertion to verify hint text

### Tooling config
- Tessl MCP server configuration and skill files
- `.gitignore` for tessl-generated files

## Breaking changes

**`-e` short flag removed**: Scripts using `stringy -e ascii` must
change to `stringy --enc ascii`. The long form `--enc` is unchanged.

## Test plan

- [x] `cargo nextest run` -- 617 passed, 0 failed, 23 skipped
- [x] `cargo clippy --all-targets --all-features -- -D warnings` --
clean
- [x] `cargo fmt --all -- --check` -- clean
- [x] `just ci-check` -- all stages pass (pre-commit, fmt, clippy,
tests, coverage, dist plan)
- [ ] Verify badges render correctly on GitHub after merge
- [ ] Verify `stringy --help` shows EXIT CODES section
- [ ] Verify `--enc` no longer accepts `-e` short form

---------

Signed-off-by: UncleSp1d3r <unclesp1d3r@evilbitlabs.io>

Author: unclesp1d3r

.codex/config.toml

@@ -0,0 +1,4 @@
+[mcp_servers.tessl]
+type = "stdio"
+command = "tessl"
+args = [ "mcp", "start" ]

.cursor/mcp.json

@@ -0,0 +1,12 @@
+{
+  "mcpServers": {
+    "tessl": {
+      "type": "stdio",
+      "command": "tessl",
+      "args": [
+        "mcp",
+        "start"
+      ]
+    }
+  }
+}

.gemini/settings.json

@@ -0,0 +1,12 @@
+{
+  "mcpServers": {
+    "tessl": {
+      "type": "stdio",
+      "command": "tessl",
+      "args": [
+        "mcp",
+        "start"
+      ]
+    }
+  }
+}

.gitignore

@@ -141,3 +141,8 @@ tests/fixtures/*
 
 # Git worktrees
 .worktrees/
+
+
+# tessl-generated files
+**/tessl__*
+.tessl/tiles/

.mcp.json

@@ -0,0 +1,12 @@
+{
+  "mcpServers": {
+    "tessl": {
+      "type": "stdio",
+      "command": "tessl",
+      "args": [
+        "mcp",
+        "start"
+      ]
+    }
+  }
+}

.mergify.yml

@@ -1,6 +1,41 @@
 queue_rules:
+  # Dosubot: only needs quality (fmt + clippy) to pass
+  - name: dosubot
+    merge_method: squash
+    autoqueue: true
+    queue_conditions:
+      - author = dosubot[bot]
+      - base = main
+    merge_conditions:
+      - check-success = quality
+
+  # Dependabot: full CI required
+  - name: dependabot
+    merge_method: squash
+    autoqueue: true
+    queue_conditions:
+      - author = dependabot[bot]
+      - base = main
+    merge_conditions:
+      - check-success = quality
+      - check-success = msrv (stable)
+      - check-success = msrv (stable minus 1 releases)
+      - check-success = msrv (stable minus 2 releases)
+      - check-success = msrv (stable minus 3 releases)
+      - check-success = msrv (stable minus 4 releases)
+      - check-success = test
+      - check-success = test-cross-platform (ubuntu-latest, Linux)
+      - check-success = test-cross-platform (macos-latest, macOS)
+      - check-success = test-cross-platform (windows-latest, Windows)
+      - check-success = coverage
+
+  # Human PRs: manually enqueued via /queue command (repo permissions restrict to maintainers)
   - name: default
     merge_method: squash
+    queue_conditions:
+      - base = main
+      - author != dependabot[bot]
+      - author != dosubot[bot]
     merge_conditions:
       - check-success = quality
       - check-success = msrv (stable)
@@ -13,58 +48,50 @@ queue_rules:
       - check-success = test-cross-platform (macos-latest, macOS)
       - check-success = test-cross-platform (windows-latest, Windows)
       - check-success = coverage
+
 pull_request_rules:
-  - name: Queue maintainer PRs with lgtm label
+  - name: Auto-approve dosubot PRs
+    description: Approve dosubot PRs so they can proceed through the queue
     conditions:
       - base = main
-      - author=@maintainers
-      - label = lgtm
-      - label != do-not-merge
+      - author = dosubot[bot]
     actions:
-      queue:
-        name: default
-  - name: Auto-approve and queue dependabot PRs
+      review:
+        type: APPROVE
+        message: Automatically approved by Mergify
+
+  - name: Auto-approve dependabot PRs
+    description: Approve dependabot PRs so they can proceed through the queue
     conditions:
       - base = main
       - author = dependabot[bot]
-      - label != do-not-merge
-      - -files~=\.github/workflows/release\.yml
     actions:
       review:
         type: APPROVE
         message: Automatically approved by Mergify
-      queue:
-        name: default
-  - name: Queue external PRs when approved by maintainer
-    conditions:
-      - base = main
-      - -author=@maintainers
-      - author != dependabot[bot]
-      - approved-reviews-by=@maintainers
-      - label != do-not-merge
-    actions:
-      queue:
-        name: default
+
   - name: Keep PRs up to date with main
     conditions:
       - base = main
       - -conflict
       - -draft
-      - label != do-not-merge
     actions:
       update: {}
+
 merge_protections:
   - name: Enforce conventional commit
     description: Make sure that we follow https://www.conventionalcommits.org/en/v1.0.0/
     if:
       - base = main
+      - author != dependabot[bot]
+      - author != dosubot[bot]
     success_conditions:
       - "title ~=
         ^(fix|feat|docs|style|refactor|perf|test|build|ci|chore|revert)(?:\\(.+\
         \\))?:"
-  - name: CI must pass
-    description: All CI checks must pass. This protection prevents manual merges
-      that bypass the merge queue.
+
+  - name: Full CI must pass
+    description: All CI checks must pass. This protection prevents manual merges that bypass the merge queue.
     if:
       - base = main
     success_conditions:
@@ -79,6 +106,7 @@ merge_protections:
       - check-success = test-cross-platform (macos-latest, macOS)
       - check-success = test-cross-platform (windows-latest, Windows)
       - check-success = coverage
+
   - name: Do not merge outdated PRs
     description: Make sure PRs are within 10 commits of the base branch before merging
     if:

AGENTS.md

@@ -67,7 +67,7 @@ Use idiomatic `clap` derive API patterns. Push validation into clap wherever pos
 | `--no-tags`   |       | `Vec<Tag>`            | Repeatable, runtime overlap check with `--only-tags`                    |
 | `--min-len`   | `-m`  | `Option<usize>`       | Custom parser enforces >= 1                                             |
 | `--top`       | `-t`  | `Option<usize>`       | Custom parser enforces >= 1                                             |
-| `--enc`       | `-e`  | `Option<CliEncoding>` | ascii, utf8, utf16, utf16le, utf16be                                    |
+| `--enc`       |       | `Option<CliEncoding>` | ascii, utf8, utf16, utf16le, utf16be                                    |
 | `--raw`       |       | bool                  | Conflicts with `--only-tags`, `--no-tags`, `--top`, `--debug`, `--yara` |
 | `--summary`   |       | bool                  | Conflicts with `--json`, `--yara`; runtime TTY check                    |
 | `--debug`     |       | bool                  | Conflicts with `--raw`                                                  |

GOTCHAS.md

@@ -29,8 +29,9 @@ Changing default values in `ExtractionConfig::default()` requires updating asser
 - `--raw` mode performs extraction only and then early-exits: ranking, normalization, and pipeline-level classification are skipped. `tags` are cleared, `score` is forced to 0, and `display_score` is set to `Some(0)`. `assert_cmd` tests run piped (non-TTY); use `format_table_with_mode(&strings, &metadata, true)` to test TTY table rendering
 - Exit codes are typed: 0=success, 2=config/validation error, 3=file not found, 4=permission denied, 1=other. Tests asserting exit codes must match `StringyError::exit_code()` in `types/error.rs`
 - `--no-tags` is the canonical flag name (kebab-case). Previously was `--notags` -- update all references when touching CLI flag names
-- Short flags: `-j` (json), `-m` (min-len), `-t` (top), `-e` (enc). Do not add short flags for infrequent flags (--yara, --raw, --summary, --debug)
+- Short flags: `-j` (json), `-m` (min-len), `-t` (top). Do not add short flags for infrequent flags (--enc, --yara, --raw, --summary, --debug)
 - `NO_COLOR` env var disables progress spinner. The spinner is also hidden when stderr is not a TTY
+- Clap derive attributes (`long_help`, `about`, etc.) require string literals -- `const` values and `concat!` with consts do not work. The `cli_help_lists_all_canonical_tags` test in `integration_cli.rs` verifies help text stays in sync with `Tag::from_str()`
 
 ## Dependencies