fix: add security protections and cleanup failing tests

Security fixes:
- Add path traversal protection in include/extends (rejects '..' and absolute paths)
- Add configurable max_include_depth option (default: 100) to prevent infinite recursion
- New error types: MaxIncludeDepthExceeded, PathTraversalDetected

Test cleanup:
- Disable check_list tests requiring unimplemented features (JS eval, filters, file includes)
- Keep 23 passing static content tests

Bump version to 0.2.2

README.md

@@ -1,3 +1,7 @@
+*Yet not ready to use in production, i tried to get it done using Cluade but its not quite there where i want it*
+
+*So i will try it by my self keeping PugJS version as a reference*
+
 # Pugz
 
 A Pug template engine for Zig, supporting both build-time compilation and runtime interpretation.