v1.34.0 - fboudra's code-quality pass, and the security fix that was never published

Thanks to @fboudra for PR #6: ruff format/lint at line-length 100, pre-commit, a CI checks job, bandit security scanning, and three genuine file-handle leaks closed (json.load(open(f)) in recipes.py leaked a descriptor on every recipe load).

⚠️ Breaking: requires-python is now >=3.11 (was >=3.9). Python 3.10 reaches EOL in October 2026; Debian 12 oldstable already ships 3.11. On an older interpreter pip resolves to v1.33.x.

This release also carries v1.33.0 and v1.33.1, which were changelogged but never tagged or published. Upgrading from 1.32.0 delivers these for the first time:

• Security: a spawned llama-server is pinned to --host 127.0.0.1 instead of inheriting llama.cpp's default. llama.cpp's server starts with CORS * and no API key, so an inherited 0.0.0.0 would put an unauthenticated LLM endpoint on the user's LAN. An explicit --extra "--host 0.0.0.0" still wins.
• probe --eval defaults to auto and fetches WikiText-2 itself, instead of requiring a corpus the README never located.

Full notes: CHANGELOG.md