v1.0.0 — first stable release

First stable release. Every roadmap feature shipped. New in 1.0: Prometheus GET /metrics export and a container image warm pool (ContainerSandboxProvider.warm() pre-pull). The claude/codex drivers are verified end-to-end against the real CLIs and the container sandbox + egress proxy against a real docker daemon. Full history in CHANGELOG.md.