Add bounded EPUB reading with local terminal I/O

.github/workflows/security-audit.yml

@@ -4,8 +4,6 @@ on:
   push:
     branches: [main]
   pull_request:
-  schedule:
-    - cron: "17 3 * * 1"
   workflow_dispatch:
 
 permissions:

CHANGELOG.md

@@ -8,6 +8,27 @@ tag does not describe the present program or its compatibility.
 
 ## Unreleased
 
+### Added
+
+- Bounded EPUB 2 and EPUB 3 reading through a semantic UTF-8 projection of the
+  linear spine, including paragraphs, lists, tables, preformatted text, and
+  image alternative text.
+- EPUB book chrome, an 80-cell centered reading column, heading hierarchy, and
+  bounded section navigation from EPUB 2 NCX, EPUB 3 nav, or XHTML headings.
+
+### Changed
+
+- Replaced Crossterm and its maintenance fork with a small in-tree Unix
+  terminal adapter limited to TUT's input, raw-mode, and ANSI rendering needs.
+- Security audits now run for pull requests, main-branch pushes, or explicit
+  manual requests instead of on a recurring schedule.
+
+### Fixed
+
+- Keyboard suspension now preserves terminal-generated signals in raw input
+  mode, so the configured suspend character restores the terminal before the
+  process stops and redraws it after continuation.
+
 ## 0.0.6 - 2026-08-13
 
 ### Fixed

CONTRIBUTING.md

@@ -30,9 +30,8 @@ cargo audit --file Cargo.lock
 ```
 
 CI runs this RustSec vulnerability check for every pull request and main-branch
-push, and weekly so newly published advisories are detected without a dependency
-change. Informational warnings remain visible for review but do not fail the
-gate.
+push. Maintainers can also start it manually. Informational warnings remain
+visible for review but do not fail the gate.
 
 Before requesting review, also run the release and distribution checks when the
 change can affect arithmetic, packaging, installation, or terminal behavior: