v0.1.6 — Wave 15: appsec + codebase audit closure, Zig 0.16 migration completion (34 findings, re-audit converged)