v0.11.0

• docs(changelog): roll unreleased entries into 0.11.0 (#212) (314238e)
• feat(budgets): add CSV export for the spend ledger (#211) (ac042b3)
• feat(config): print the watching line from the watcher's ready hook (#209) (44db3e6)
• ci(docs): order-check the init scaffold in the config-samples guard (#208) (cae0339)
• fix(config): reject unknown keys in all nested config sections (#207) (f85b088)
• build(deps): clear the three new high audit advisories (#206) (ac850f8)
• build(deps): patch the react-router high advisory (#202) (681bb20)
• fix(sideband): finalize committed expiries under the latched audit id (#200) (16ceba4)
• fix(config): reject dashboard-routed rule approvals with dashboard off (#199) (dcf242e)
• build(deps): patch fast-uri and postcss high advisories (#197) (d392ec6)
• feat(budgets)!: match contributors on argument values (#196) (e84248d)
• fix(sideband): simulate rule rate and spend limits in dry-run (#193) (c8528ad)
• test(cli): replace wall-clock waits with condition-based waiting (#190) (a2debb7)
• build(deps): patch js-yaml, axios, and brace-expansion high advisories (#189) (d62217e)
• docs(policies): document retryable denial payloads and rename rule spend buckets (#187) (71ba33d)
• fix(config): align schema field order and shipped examples with the canonical order (#186) (a95cee9)
• feat(cli): add budgets to the init scaffold and quickstart configs (#184) (323475d)
• ci(docs): validate every shipped config sample against the real schema (#183) (62e3525)
• fix(config): reject unknown top-level keys in helio.yaml (#181) (67e13dd)
• docs: nest every copyable rule snippet under policies.rules (#180) (9fbf7f5)
• build(pnpm): upgrade to pnpm 11 to restore the dependency audit (#173) (3565e05)
• refactor(policy): remove the deprecated ruleIndex self-repair alias (#172) (a502096)
• docs: call the feature cross-tool spend budgets, and make the samples run (#169) (1bb6aa3)
• docs(readme): say what Helio enforces, not what it tracks (#166) (801fb24)