Prepare v0.1.1 release

[vicotrbb]

Summary

• release the compatible documentation, test, security, and dependency hardening since v0.1.0 as v0.1.1
• synchronize every version surface and strengthen scripts/check-version.sh
• add maintained public image, Helm 3/4, checksum-installer, and clean-cluster published-artifact release gates
• tolerate slow cold pulls of the prepared workspace image while keeping local and published E2E deterministic
• document the solo-maintainer ruleset recovery procedure

Validation

• make bootstrap, make lint, make test, make helm, and make images
• npm, pip-audit, cargo-audit, gitleaks, strict kubeconform, ShellCheck, and actionlint v1.7.12
• local clean Kind API/SSH/stop/retain/recreate/host-identity/purge lifecycle
• public v0.1.0 anonymous image pulls, amd64/arm64 manifests, SPDX SBOMs, and signed provenance
• public v0.1.0 OCI chart rendered with Helm 3.21.3 and Helm 4.2.2; both strict kubeconform clean
• checksum-installed v0.1.0 CLI plus public chart/images through the full clean Kind lifecycle