v1.1.0 — operational hardening

Production-tested rebuild.

Added

• scripts/zram_setup.sh — idempotent compressed swap (zstd, priority 100)
• scripts/resource_watchdog.sh — RAM/swap/disk/load watchdog, silent when healthy
• scripts/chrome_reaper.sh — reclaims leaked headless-browser trees, dry-run by default
• CI pipeline: bash syntax, shellcheck, Python compile, docs link gate
• Community files: CONTRIBUTING, SECURITY, CODE_OF_CONDUCT, issue/PR templates
• GitHub Pages landing site

Changed

• README rebuilt around measured production behaviour: resource envelope, real incident list, architecture diagram, honest cost table