release: v1.9.0

[sonukapoor]

Added

• --report [dir] flag generates a self-contained HTML vulnerability dashboard (default: ./cve-report/)
• --no-open flag suppresses auto browser launch when used with --report
• HTML report includes severity cards, interactive findings table with filters, copy-ready fix commands, expandable dependency paths, and CVE/GHSA links
• Report output: index.html (self-contained, no CDN) and report.json (machine-readable)
• CVE Lite CLI is now an OWASP Incubator Project — affiliation reflected in report header and README

Closes #222