SAGE 2.1.1

SAGE 2.1.1

Pinned Ed25519 verify (TOFU refused), auditor policy/kit, quarantine unpack, release gate, threat-matrix, multi-OS CI.

See CHANGELOG.md for full notes. Install: pip install -e ".[dev]".