Release v1.2.0 - Add 2025 threat scenarios

[joris-decombe]

Release v1.2.0

This PR prepares the release of version 1.2.0, which includes the three new 2025 threat scenarios that were added in PR #2.

Changes in this PR

• Bump version from 1.1.0 → 1.2.0 in package.json
• Update CHANGELOG.md with comprehensive release notes for v1.2.0

What's in v1.2.0

Three new cybersecurity scenarios based on real-world incidents from 2024-2025:

1. The "Deepfake" CFO (Easy) - Scenario code: 1461

   • AI-driven BEC via deepfake video (based on $25M Arup Hong Kong case)

2. The Poisoned Package (Medium) - Scenario code: 3164

   • Supply chain attack via typosquatting (based on XZ Utils & Polyfill.io)

3. Hypervisor Ransomware (Hard) - Scenario code: 5126

   • ESXi/Hyper-V ransomware with double extortion (based on ESXiArgs & Akira)

All scenarios include full English/French translations and follow NCSC R&R format.

Post-Merge Actions

After merging this PR:

1. Create and push git tag v1.2.0
2. GitHub Actions will automatically trigger the release workflow
3. Release artifacts will be published to GitHub Releases

Checklist

• Version bumped in package.json
• CHANGELOG.md updated with release notes
• All changes from PR Add 2025 threat scenarios based on real-world incidents #2 are included in main