feat: publish Regex Tools 0.2.0

docs/PORTAL_REQUIREMENTS.md

@@ -1,6 +1,6 @@
 # Portal requirements
 
-Regex Tools 0.1.0 is a static nested-path-safe application.
+Regex Tools is a static nested-path-safe application.
 
 Required delivery behavior:
 
@@ -9,11 +9,17 @@ Required delivery behavior:
   revalidation/no-cache resources.
 - Hashed Vite assets may use immutable long-term caching.
 - CSP must allow `worker-src 'self' blob:`.
-- No WebAssembly MIME rule or `wasm-unsafe-eval` is required by v0.1.0.
+- `engines/pcre2/pcre2.wasm` must use `application/wasm`.
+- `script-src` must permit self-hosted WebAssembly compilation, normally with
+  `'wasm-unsafe-eval'`; broad `'unsafe-eval'` is neither needed nor recommended.
+- `engines/pcre2/pcre2.mjs`, metadata, checksums, licence and WASM should use
+  revalidation or a release-scoped immutable cache. They are not
+  content-hashed filenames and must never drift under one release identity.
 
 The Portal must consume the immutable release ZIP, verify its SHA-256, verify
-manifest ID `de.add-ideas.regex-tools` and version `0.1.0`, and mount it at a
+manifest ID `de.add-ideas.regex-tools` and version `0.2.0`, and mount it at a
 relative target such as `apps/regex/`.
 
-When PCRE2 ships later, the smallest additional change will be
-`application/wasm` delivery and `script-src 'self' 'wasm-unsafe-eval'`.
+The package, manifest, tag, artifact URL and checksum must all use the v0.2.0
+identity. The historical v0.1.0 artifact coordinates remain immutable and must
+not be overwritten or reused.