v1.1.0

What's new

• Vulnerability scanning — rake scan runs Trivy against built images, failing on HIGH/CRITICAL vulnerabilities. Configurable via SEVERITY env var.
• Containerfile naming — Standardized on Containerfile.erb/Containerfile as the OCI convention. Dockerfile.erb/Dockerfile still accepted as fallback for backwards compatibility.
• Reliable image identity — Build uses --iidfile to capture image IDs. All downstream tasks (tag, test, scan, push, patch, clean) reference images by ID instead of the local/ registry name, eliminating Podman's inconsistent localhost resolution.
• Debug improvements — rake debug now shows image ID, iidfile path, and predicted scan commands.

Fixes

• Fixed stale DockerImage class reference in template.rake (now ContainerImage).