v1.1.0

Minor release: broader tool coverage and sharper ambient-context resolution, so more real production targets are recognized before a mutating command runs.

New guarded tools

• Cover pulumi and ansible/ansible-playbook by @karlkfi in #4
• Cover ssh <prod-host> with denylist-only deny by @karlkfi in #3

Sharper target resolution

• Classify kube-contexts by cluster server URL, not just name by @karlkfi in #2
• Classify the terraform backend state location, not just the workspace by @karlkfi in #1
• Classify and resolve AWS default and named --profile accounts for ambient targeting by @karlkfi in #6, #8
• Resolve eksctl's ambient AWS default profile by @karlkfi in #7
• Resolve pulumi's ambient selected stack for prod denial by @karlkfi in #9

Tooling

• Add a friction report for prod-guard prompts by @karlkfi in #5

Full Changelog: v1.0.0...v1.1.0