Add build version metadata, changelog, and version display

Embed git commit hash, dirty flag, and target triple in all binaries
via a zero-dependency build.rs. Wire clap short/long version output
so -V shows "0.1.0 (rev abc1234)" and --version adds the target
triple. Log version at daemon startup.

Add version field to show_status control socket API response. Show
the daemon's version in fipstop's tab bar title and Runtime section.

Add CHANGELOG.md in Keep a Changelog format with the 0.1.0-alpha
release (2026-02-24) and unreleased work since then.

src/bin/fipsctl.rs

@@ -5,6 +5,7 @@
 
 use clap::{Parser, Subcommand};
 use fips::config::{write_key_file, write_pub_file};
+use fips::version;
 use fips::{encode_nsec, Identity};
 use std::io::{BufRead, BufReader, Write};
 use std::os::unix::net::UnixStream;
@@ -13,7 +14,12 @@ use std::time::Duration;
 
 /// FIPS control client
 #[derive(Parser, Debug)]
-#[command(name = "fipsctl", version, about = "Query a running FIPS daemon")]
+#[command(
+    name = "fipsctl",
+    version = version::short_version(),
+    long_version = version::long_version(),
+    about = "Query a running FIPS daemon"
+)]
 struct Cli {
     /// Control socket path override
     #[arg(short = 's', long)]