v0.1.0: logo, i18n pt/en, CI com caches, testes e documentação

- Logo oficial (sabia.png) e conjunto de ícones do app desktop.
- Interface em português e inglês: tradutor por observação do DOM, seletor
  de idioma e checagem de cobertura de tradução no CI.
- CI/CD com caches (rust-cache, .deb do Tauri em cache) e pipeline de release
  multiplataforma (CLI em 5 alvos + app desktop via tauri-action), templates
  de issue/PR.
- Suíte de testes de integração do sabia-core (scan e2e, handshake/crack
  4-way e PMKID, pcap, trilha de auditoria) — 46 testes verdes.
- Documentação completa pt/en: README, ROADMAP, SECURITY, CONTRIBUTING,
  CHANGELOG e docs/ (cli, interface, arquitetura), com enquadramento de uso
  autorizado.
- Correções de clippy (-D warnings) e formatação em toda a árvore.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

docs/cli.md

@@ -0,0 +1,83 @@
+# Terminal (`sabia`)
+
+**English** · [Português](pt-BR/cli.md)
+
+The `sabia` binary has the global option `--audit <file>` (audit trail; default `.sabia-audit.log`) and the commands below. Capture and monitor mode require Linux and root; analysis and cracking run on any platform.
+
+## `iface` — interfaces and monitor mode
+
+```bash
+sabia iface list                    # Wi-Fi interfaces and their modes
+sabia iface channels <iface>        # channels the radio supports  [--json]
+sudo sabia iface monitor <iface> on # enable monitor mode (on|off)
+```
+
+## `scan` — capture the air
+
+```bash
+sudo sabia scan <iface> [options]
+```
+
+| Option | Effect |
+|---|---|
+| `--channel <n>` | Fix a channel (without it, hops across the supported ones). |
+| `--band <2.4\|5\|6\|all>` | Band when hopping channels. |
+| `--hop-ms <ms>` | Time on each channel (default 350). |
+| `--seconds <n>` | Stop after N seconds (default: until Ctrl+C). |
+| `--out <file.pcap>` | Save captured frames. |
+| `--crack <dictionary>` | After capturing, try to crack the first handshake. |
+| `--json` | Print only the final JSON. |
+
+Shows networks (APs), clients and handshakes seen (4-way and PMKID).
+
+## `analyze` — read a `.pcap` offline
+
+```bash
+sabia analyze <file.pcap> [--json]
+```
+
+## `crack` — dictionary cracking
+
+```bash
+sabia crack <file.pcap> --wordlist <list.txt> [--bssid <mac>] [--station <mac>] [--json]
+```
+
+Recomputes the PMK with PBKDF2-HMAC-SHA1 and checks the MIC (4-way) or the PMKID, for WPA/WPA2-PSK. `--bssid`/`--station` filter which handshake to use.
+
+## `deauth` — authorized deauthentication test
+
+```bash
+sudo sabia deauth <iface> --bssid <mac> [--station <mac>] [--count 5] [--reason 7] --yes
+```
+
+Without `--station`, the target is broadcast. The **`--yes`** flag confirms you are authorized to test this network — without it, the command refuses. It is recorded in the audit trail.
+
+## `doctor` — diagnostics
+
+```bash
+sabia doctor [--json]
+```
+
+Checks privileges, tools (`iw`, `ip`) and monitor-capable interfaces.
+
+## `audit` — audit trail
+
+```bash
+sabia audit verify [file]      # check the hash-chain integrity
+sabia audit show [--limit 20]  # latest entries
+```
+
+## `update` — updating
+
+```bash
+sabia update           # check for a new version
+sabia update --apply   # download, verify the SHA-256 and swap the executable
+```
+
+## `ui` — desktop/web interface
+
+```bash
+sabia ui [--port 4337] [--no-open]
+```
+
+Starts the local interface server and opens the browser (or not, with `--no-open`).