v0.1.1

First release published through the GitHub → npm trusted publisher.

Fixed

• xctl --version and the MCP serverInfo.version now report the published package version instead of a hardcoded string.
• Local npm publish no longer fails with EUSAGE when provenance cannot be generated outside CI.
• Publishing refuses to ship when the CLI or MCP bundle is missing.
• The npm workflow waits for registry propagation before reporting.