cfctl v1.1.1

Unsigned release; integrity is by checksum. Verify against SHA256SUMS before use.

Changes

• keys mint fails fast on contradictory arguments — --user with --zone, or a malformed --zone, previously cost a live permission-inventory request and then reported an inventory failure instead of the actual problem. Scope resolution now runs before any network I/O, so these fail closed with the accurate message and performed: false (#87).
• Documentation trimmed 26% and corrected. docs/upstream-schema-gaps.md keeps its argument, asks, and reproduce script rather than 840 lines of regenerable enumeration; the README is rebuilt as a front door, leading with what cfctl is for and stating the blocked-capability posture plainly instead of burying it. Two docs still claimed minting binds account scope only — superseded by zone-scoped minting in 1.1.0 (#85, #86).

No public command surface changed since 1.1.0.

Verification

cargo xtask verify exit 0 — fmt, clippy, full-workspace tests, cargo-deny, full-history secret scan. The argument-ordering fix was found by exercising the --user mint lane against a live account, and is verified in the released binary itself.