v1.1.1 - Security Hardening

Comprehensive security audit and hardening pass across the full Limecore suite.\n\nFixes:\n- RLS completeness audit: verified USING + WITH CHECK on all Supabase tables\n- subjects.color CSS injection review: confirmed React style prop binding is safe (no cssText interpolation)\n- Backup rules: added backup_rules.xml and data_extraction_rules.xml to control Android backup scope\n- Android manifest hardened: android:exported set explicitly on all components\n- Anon key audit: confirmed no service_role key exposure\n- Auth state race condition review passed