v1.1.1-preview

⚠️ Preview release. Published for early testing — not marked "Latest". The mock
format, its YAML/JSON serialization, and the HTTP/CLI API are unchanged from 1.0.0
(locked by golden serialization tests and the venom integration suite), so your existing
mocks and scripts keep working.

This release is all about distribution: Smocker now ships as a single self-contained
binary and an official container image.

📦 Distribution & packaging

• Self-contained binary: the web UI is embedded in the binary (go:embed) — one file,
  nothing else to serve.
• Official container image on GHCR (ghcr.io/smocker-dev/smocker): built FROM scratch,
  multi-arch (linux/amd64, linux/arm64, linux/arm/v7), running unprivileged
  (nobody).
• Prebuilt binaries for Linux, macOS and Windows (amd64 + arm64, plus linux armv7),
  attached to the release next to the smocker.tar.gz archive.

🐛 Fixes

• curl export: string request bodies are no longer wrongly double-quoted (#309).
• Response header casing is preserved as written instead of being canonicalized (#313).
• Two UI/server bugs surfaced during issue triage.

📖 Documentation

• Added a design principles & opinionated choices spec (docs/PRINCIPLES.md) to guide
  contributions and issue triage.

🔧 Tooling & CI

• Build pipeline: build the client and cross-compile once, then assemble the images from
  the prebuilt binaries — multi-arch without QEMU; release binaries cross-compiled only on tags.
• Docker smoke test in CI (proves the embedded UI is served and a mock round-trips).
• Dependabot extended to Go modules and npm.
• npm run dev now works against a running backend.

Full changelog: v1.1.0-preview...v1.1.1-preview