v1.1.0: the cross-model dogfood release

The cross-model dogfood release. Two full A/B rounds (Claude Code vs Codex CLI running Fhorja on the same briefs) were forensically analyzed, turned into two adversarially reviewed backlogs, and both were delivered end to end, each item shipped through Fhorja's own task ceremony.

Highlights:

• web-runtime-verify (ADR-0112): the web runtime gate, sibling of the Godot and mobile gates. Ephemeral-port serve, page identity first with automatic re-bind recovery, the standard battery with honest degradation, verdict on shown output only.
• One-call substrate writes with real integrity (ADR-0110, ADR-0111): the apply subcommand collapses the compliant write cycle into one call; a blocking integrity floor at closure consumes the batch validator; the sha chain and content-vs-log tip checks now run by default; --derive-sha-before is the default (measured, not trusted).
• Lost-session recovery (ADR-0113): an explicit, read-only --lost-session mode on resume-from-state with a hard 6-call cap and PROPOSED-with-provenance extractions, backed by the new wos/session-recovery.md harness map.
• Codex CLI harness profile: verified operational quirks (write-root alignment, approval front-load, native patch tool, apply_patch stall protocol) plus a cross-harness primitives equivalence table.
• Active epistemic humility (ADR-0109): what the agent may assert is keyed to claim traceability; provenance-only status, abstention as a routed continuation.
• Mobile and contract gates (ADR-0106 to 0108): the mobile runtime gate becomes a mandatory closure floor; vendor integrations need one live verification round before their contract gate passes.
• Compaction-proof ## Quick reanchor TASK_STATE block, cheaper bootstrap tiers, the references-reconcile "cite only what you used" gate at every lifecycle home, and the Beaufort hardening wave.

Full detail in the ## [1.1.0] section of CHANGELOG.md.