Bloks 1.0.1

A maintenance release. No feature changes; upgrade at your leisure.

Security. The spreadsheet viewer moved to xlsx 0.20.3, clearing a prototype pollution and a ReDoS advisory. Bloks opens spreadsheets its own agents write, so an agent talked into writing a malicious file was a real path to both.

Builds. Tag builds no longer keep a second ninety day copy of every installer as a run artifact, which had quietly filled the artifact quota and broken the build after 1.0.0. The install script allowlist moved to where pnpm still reads it: Electron was missing from the old one, so a clean checkout could finish without ever fetching the Electron binary.