Release v0.11.0

Highlights

• cwd and env construction options for the Node and Python bindings —
  callers can now set the starting working directory and initial environment
  directly at Bash construction time, instead of paying for a leading
  cd/export prelude on every run
  (#2072).

What's Changed

• feat(site): span runtime surface across full hero width (#2079) by @chaliy
• Add GitHub sponsor username (#2078) by @chaliy
• chore: pre-release maintenance — deps update, vet refresh, threat-model & changelog sync (#2077) by @chaliy
• feat(site): simplify hero runtime snippet card (#2075) by @chaliy
• chore: set package author metadata across PyPI, npm, and crates.io (#2073) by @chaliy
• feat(bindings): expose cwd and env options to Node and Python (#2072) by @chaliy
• chore(deps): bump zeroize to 1.9.0 and napi to 3.9.2 (#2071) by @chaliy
• chore(ci): bump github-actions group (setup-uv, codecov, taiki-e) (#2070) by @chaliy
• fix(deps): patch esbuild and PyO3 security advisories (#2069) by @chaliy
• fix(paste): handle trailing -d flag (#2057) by @chaliy
• fix(fs): preserve recursive delete child whiteouts (#2056) by @chaliy
• fix(awk): cap multi-subscript arrays (#2055) by @chaliy
• fix(parser): escape ANSI-C NUL sentinel collisions (#2053) by @chaliy
• test(specs): back limitations.md stance rows with evidence tests (#2051) by @chaliy
• fix(compgen): list builtins from the live registry, not hardcoded copies (#2040) by @chaliy
• chore(specs): threat-model ledger — backfill 12 code-cited IDs, add drift lint, compress 21 KB (#2039) by @chaliy
• feat: generated builtin inventory, limitations negative spec, spec/agent-config compression (#2038) by @chaliy

Full Changelog: v0.10.0...v0.11.0