v0.11.1

Changed

• scanner: ruby and php now use the same content scanner as python/node/perl - inline code (-e/-r) and script files (.rb/.php) are scanned, so a safe script file is auto-allowed instead of prompting

Fixed

• evaluator: chain-resolved command provenance ($VAR -> binary) is now recorded in the audit log for every decision, not just auto-allowed ones