v4.1.1

Patch release for CLI diagnostics: doctor now redacts allowance secrets in verbose output, reports frozen or inactive tier/org lifecycle as non-ok, allowance export rejects unknown flags before SDK work, and top-level projects help now lists the real project commands.