v1.0.1

Production hardening release.

• Uses the canonical non-redirecting https://www.palmods.gg API origin by default
• Adds a protected hidden draft-mod production canary workflow
• Adds canary safety and canonical-origin test coverage
• Preserves the existing action inputs and outputs

Use palmods/palmods-publish@v1 in author workflows. Security-sensitive users may pin the full release commit SHA.