v0.1.0

First release. Inbound: per-provider signature verification (ComplyCube + HubSpot v3 reference providers), fenced unique-ingest dedup ledger, lease-based claiming. Outbound: fanout dispatch, Standard Webhooks signing, row-owned retry/dead-letter on Oban, bounded native HTTP adapter. Security floors per ADR-0005 (secrets-as-sources, SSRF registration+send, no-body response snippets). Nine telemetry events with a contents-only floor. Known gap: retention/TTL hooks (#18). Full changelog in the repo.