v1.0.0-rc1

What's Changed

• Generic outbound webhook delivery infrastructure (#218) by @Polliog in #242
• ingestion safety: fail-closed pii masking + health visibility by @Polliog in #243
• capability enforcement: sigma, channels, api keys, dashboards by @Polliog in #244
• unified webhook event envelope + after lifecycle hooks by @Polliog in #245
• traces/otlp gap closure: metadata shape, frontend tests, e2e by @Polliog in #246
• test debt: drop all coverage exclusions, shared schemas, ci wiring by @Polliog in #247
• audit primitive: typed actions, actor types, outcomes, per-org retention by @Polliog in #248

Full Changelog: v1.0.0b-beta2...v1.0.0-rc1