DiffNotes 1.1.0

Added

• Deploy card: the agent says what shipping a PR takes (migrations, env vars, feature flags, the order of steps,
  rollback) in deploy; it is pinned at the top of the summary box and the PR's page, and copy summary includes it.
• Repository rules: an account admin sets what every upload to a repository must carry (a risk on every note, a
  deploy card, screenshots or a recording for paths like web/**); a missing one is refused with 422 saying what to
  add, and the skill and MCP clients add it.
• Keyboard in the extension: j / k next / previous note, n notes on / off, o opens the note's attachment,
  ? lists the keys.
• SECURITY.md: report vulnerabilities privately through GitHub.