fix: preserve JPEG EXIF orientation

[maruson08]

Summary

• preserve exactly one valid IFD0 Orientation value from 1 through 8 in canonical minimal EXIF
• remove every other EXIF and GPS field without pixel decoding or re-encoding
• allow only canonical Orientation-only EXIF during privacy verification
• prepare version 0.1.1 documentation, package metadata, and release checks

Safety behavior

Malformed, out-of-range, duplicate, conflicting, incomplete, or limit-truncated Orientation is removed rather than guessed. JPEG scan data, ICC, unknown APP segments, structural bytes, and trailing bytes remain byte-identical.

Validation

• 29 test files and 259 tests
• fixed-seed 250-run fuzz smoke
• typecheck, lint, and formatting
• Chromium browser smoke
• package, license, and vulnerability audits
• two detached-worktree release builds with byte-identical artifacts
• zero runtime dependencies and unchanged public exports

Closes #29
Closes #30
Closes #31
Closes #32