v1.1.0

Added

• front-mcp --doctor — diagnoses config, auth, connectivity, and tool coverage
• front-mcp --version — reads version dynamically from package.json
• front-mcp --help — full CLI usage
• Auto-generated tool reference (docs/TOOL_REFERENCE.md) with policy tiers per action
• Mermaid sequence diagrams in specs (data flow, OAuth, confirmation, milestones)
• README badge wall (CI, npm, license, Node, TypeScript, tools, actions)
• CodeQL security scanning workflow

Fixed

• Policy engine confirmation bypass (HIGH severity security fix)
• 12 incorrect API endpoint paths verified against official Front docs
• --doctor properly refreshes expired OAuth tokens before connectivity check

Changed

• 525 tests (was 519 in v1.0.1)
• Removed nonexistent endpoints: rules.list_for_inbox, message_templates.list_children/create_child