fix(lint): add nosec directive for formula parser file read

Also: comprehensive CHANGELOG update for v0.36.0 prep
- Formula system (bd cook, extends, needs/waits_for)
- Gate issue type for async coordination
- bd list --pretty/--watch viewer enhancements
- bd search date/priority/content filters
- 15+ bug fixes since v0.35.0
- Test coverage improvements (daemon 72%, compact 82%)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

internal/formula/parser.go

@@ -77,6 +77,7 @@ func (p *Parser) ParseFile(path string) (*Formula, error) {
 	}
 
 	// Read and parse the file
+	// #nosec G304 -- absPath comes from controlled search paths or explicit user input
 	data, err := os.ReadFile(absPath)
 	if err != nil {
 		return nil, fmt.Errorf("read %s: %w", path, err)