QA-01: Verify conformance, document and release v0.1.0 #5

Scope

Add executable Node differential fixtures for the supported contract and an accurate method/deviation matrix. Verify documented examples, metadata, wheel and sdist installations outside the checkout. Add version-checked trusted-publishing release workflow and pypi environment.

Acceptance: batch squash-merged in dependency order, final main CI passes on Linux/macOS/Windows Python 3.14, trusted publisher configured, v0.1.0 published, PyPI artifact hashes verified and fresh Python-JavaScript==0.1.0 installation runs the examples with published dependencies. Repository remains private.

Dependencies

JS-03. See #1.

Delivery

Branch per task; focused tests and relevant suite; ready PR and CI; squash merge in dependency order. Record implementation and verification in the PR.

Completed release verification

Implementation PR #19 and review fix #21 are squash-merged. Final main/tag v0.1.0: c0389e4645c39f3db23ad2e911475fdd3188dad5.

• Final-main CI passes on Linux, macOS and Windows: https://github.com/outside-labs/Python-JavaScript/actions/runs/38959517890

• Release build and trusted publication pass: https://github.com/outside-labs/Python-JavaScript/actions/runs/38959744536

• All 46 tests, including the independent native Node fixture, pass from a fresh PyPI-only installation outside the checkout.

• Both README examples, dependency versions and pip check pass.

• Published wheel/source hashes match the release build and intended file allowlists.

• PyPI: https://pypi.org/project/Python-JavaScript/0.1.0/

• Dependencies: JavaScript-Fetch-API 0.2.0 and JavaScript-JSON 0.1.0.

• python_javascript-0.1.0-py3-none-any.whl SHA256 3909129535faa257b58a99b39e40e86c0e88c547c32cb8c111ff9e1b8ebeb564

• python_javascript-0.1.0.tar.gz SHA256 1d3e72381e8dde4b010430acb8d8a19b16caa01f223686c80bd95725fd70b8bb