Upgrade Steward v0.1.0

Initial release: changelog research, sandboxed upgrades and migrations, evidence-bound approval, and fail-closed pull request publication.