v0.1.1

fix(tls): trust certifi's CA bundle so modern certs verify; bump 0.1.1

The frozen PyInstaller binary shipped with an empty/stale OpenSSL CA store, so valid certs on newer roots (e.g. Let's Encrypt ISRG chain) failed with 'unable to get local issuer certificate' — a false 'TLS did not verify'. Now we load certifi's bundle on top of the system store (PyInstaller bundles it via --collect-data certifi). Verification stays strict; only the false negatives go away.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>