v1.0.0

Initial stable release. Ed25519-signed, versioned license format designed as a permanent ABI. Split-key signing architecture with the private key never exposed to the internet. Multi-key verification built in for future key rotation. Full test coverage across every trust boundary. Complete documentation: architecture, license scheme and threat model, API reference, and operations runbook — including the real secret-exposure incident from 2026-07-19, its remediation, and the queue-resilience behavior observed during that incident.