v1.1.0

What's Changed

• ci: verify main, harden release validation, add replacement CI by @joslat in #93
• ci: delete Squad automation, rewrite release.yml with OIDC trusted publishing by @joslat in #94
• ci: current-head-only tag policy, dedicated package-consumer smoke tests by @joslat in #95
• ci: wire up Codecov, add Dependabot, pin actions to SHA by @joslat in #96
• docs: correct the absolute multi-tenant isolation claim by @joslat in #98
• docs: draft and publish the threat model and security policy by @joslat in #103
• tests: close the two live owner-isolation coverage gaps by @joslat in #104
• Add a library-wide strict multi-tenant isolation mode (#100 Stage 1) by @joslat in #105
• Guarantee owner scoping across the complete MAF invocation (#90) by @joslat in #107
• Stop promoting raw recalled memory into unrestricted system messages (#92 Phase 1) by @joslat in #108
• Wire configured RecallOptions into native MAF recall (#87) by @joslat in #109
• Persist and extract from the complete turn, not just the response (#89) by @joslat in #110
• fix: idempotent cross-component message persistence + non-text-content policy (#89) by @joslat in #111
• docs+build: fix stale/inaccurate docs and wire ShoppingAssistant into CI by @joslat in #112
• Complete StrictMultiTenant coverage across remaining adapters and MCP tools (#100 Stage 2) by @joslat in #113

Full Changelog: v1.0.3...v1.1.0