v0.1.1

First CI-published release via npm trusted publishing (OIDC), with provenance attestation. Functionally identical to 0.1.0, which was bootstrap-published manually with 2FA — see SECURITY.md for why. All future releases publish exclusively from CI.