v1.1.0

What's Changed

• fix(plugins): verify the installed tree, not the staging tree by @teoritty in #72
• feat(plugins): deny plugin processes the shared USER surface on Windows by @teoritty in #73
• docs: state the plugin trust model and stop calling it a sandbox by @teoritty in #74
• fix(plugins): delete the second, unvalidated install path by @teoritty in #75
• fix(plugins): give each plugin instance its own temp directory by @teoritty in #76
• feat(plugins)!: remove localEmbedServer (Mode B) by @teoritty in #77
• refactor(plugins): put a childProcess seam under the spawner by @teoritty in #78
• feat(plugins): report the sandbox mode a plugin process is running behind by @teoritty in #79
• feat(plugins): confine plugin processes with Landlock (Linux) and AppContainer (Windows) by @teoritty in #80
• feat: SSH key manager with an encrypted in-vault key store by @teoritty in #81
• fix(build): report the version in the Windows executable, and drop the committed mutate.exe by @teoritty in #82

Full Changelog: v1.0.0...v1.1.0