v1.0.1-beta.5

docs(security): document OVSX_PAT ownership and rotation

Mirrors the existing VSCE_PAT entry, now that the odrin Open VSX
namespace and OVSX_PAT secret exist (ISSUE-97).

ISSUE-97

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>