v0.1.0: logo, i18n pt/en, CI com caches, testes e documentação

- Logo oficial (sabia.png) e conjunto de ícones do app desktop.
- Interface em português e inglês: tradutor por observação do DOM, seletor
  de idioma e checagem de cobertura de tradução no CI.
- CI/CD com caches (rust-cache, .deb do Tauri em cache) e pipeline de release
  multiplataforma (CLI em 5 alvos + app desktop via tauri-action), templates
  de issue/PR.
- Suíte de testes de integração do sabia-core (scan e2e, handshake/crack
  4-way e PMKID, pcap, trilha de auditoria) — 46 testes verdes.
- Documentação completa pt/en: README, ROADMAP, SECURITY, CONTRIBUTING,
  CHANGELOG e docs/ (cli, interface, arquitetura), com enquadramento de uso
  autorizado.
- Correções de clippy (-D warnings) e formatação em toda a árvore.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

ROADMAP.md

@@ -0,0 +1,35 @@
+# Roadmap
+
+**English** · [Português](ROADMAP.pt-BR.md)
+
+Sabiá does Wi-Fi auditing: it discovers networks, captures handshakes (4-way and PMKID), cracks WPA/WPA2-PSK by offline dictionary and tests deauthentication with authorization. Always for authorized use, with a local audit trail.
+
+## Done (0.1.0)
+
+- **Monitor mode** and channel control via netlink/`iw`.
+- **Scanning** of 2.4, 5 and 6 GHz: APs and clients, with SSID, BSSID, channel, signal and security.
+- Raw 802.11 capture via **AF_PACKET** (no libpcap), **radiotap** and management-frame parsing.
+- Capture of the **4-way handshake (EAPOL)** and the **PMKID**.
+- **Offline dictionary cracking** (PBKDF2-HMAC-SHA1, MIC and PMKID) for WPA/WPA2-PSK.
+- **`.pcap`** read and write; offline `.pcap` analysis.
+- Authorized **`deauth`** (`--yes` flag).
+- Local hash-chained **audit trail**; `doctor` diagnostics.
+- **CLI** + **desktop app** (Tauri) + local UI server; **one-click update**.
+
+## Next
+
+- **Rules and masks** in cracking (hashcat style), beyond the plain dictionary.
+- **`22000` export** to take the handshake straight to hashcat/John.
+- **GPU** acceleration for PMK derivation.
+
+## Later
+
+- **WPS attack** (PIN/Pixie Dust) in authorized testing.
+- **Rogue AP / evil twin** for client assessment, with authorization.
+- **Capture on Windows** via Npcap.
+
+## Long term
+
+- **WPA3/SAE**: detection and downgrade paths where applicable.
+- Validation on **varied hardware** (chipsets and regulatory domains).
+- Signing of release binaries (SmartScreen/Gatekeeper).