chore: repair post-release version identity

[intelland]

Summary

• distinguish the current development source identity (0.1.1.dev0) from the published stable 0.1.0 release
• derive release checks and audit artifact names from pyproject.toml
• make release publishing fail closed for development versions, existing PyPI versions, and PyPI lookup failures
• broaden release-audit path detection without changing product behavior

Scope

No public API, comparison semantics, schema, dependencies, stable-release documentation, release artifacts, or publication state changed.

Validation

• Ruff: PASS
• strict Mypy: PASS
• build + Twine: PASS
• release-audit smoke: PASS
• full runtime tests are delegated to hosted Python 3.11 CI because the local Windows disposable environment cannot initialize CPU PyTorch (c10.dll).

Publication was not dispatched.