v1.1.0-preview1

What's Changed

• chore(ci): supply-chain hardening — pin actions, lockfiles, image digest, vuln gate by @andregoepel in #44
• docs(security): trust boundaries + host obligations (THREAT-MODEL.md) by @andregoepel in #49
• feat(security): default-deny readiness + domain-layer invariants (#41) by @andregoepel in #50
• chore(deps): bump actions/setup-dotnet from 4.3.1 to 5.3.0 by @dependabot[bot] in #45
• chore(deps): bump actions/checkout from 4.3.1 to 7.0.0 by @dependabot[bot] in #46
• feat(security): unique active role names (partial unique index) by @andregoepel in #51

New Contributors

• @dependabot[bot] made their first contribution in #45

Full Changelog: v1.0.2...v1.1.0-preview1