v0.1.1

Fixed

• App Attest attestation is now bounded by a 30-second timeout on both paths. The FFI bridge (synheart_native_get_attestation) replaced its unbounded DispatchSemaphore.wait() with wait(timeout:) and now holds the result in a reference-counted box (so a late write from the detached Task lands on a live object, not freed memory). DeviceRegistrar.fetchAttestation wraps its generateKey/attestKey calls in a task-group timeout. A stalled, network-backed attestation call no longer blocks indefinitely; a timeout is treated as attestation unavailable (returns nil).