Upgrade Steward v0.1.1

Fail closed on post-verification tampering by binding approval evidence to the exact staged Git tree and validating publication buffers against staged blob IDs. Adds deterministic security regressions to CI.

Upgrade Steward v0.1.0

Initial release: changelog research, sandboxed upgrades and migrations, evidence-bound approval, and fail-closed pull request publication.