chore(main): release 1.1.0

[skaphos-release-bot]

🤖 I have created a release beep boop

1.1.0 (2026-07-26)

Features

• activity: repository activity digest, cost-bounded by construction (#119) (2c21d8e)
• add commit file and diff evidence (#12) (1c8369b)
• add commit-query core (1674079)
• add explicit "query" subcommand (#16) (3d1bc3e)
• add GitLab commit provider (#6) (8e9823a)
• add MCP server with read-only get_commits tool (37c3616)
• add multi-runtime MCP installer (48d09bf)
• add OAuth App authentication for GitHub and GitLab (SKA-466) (#13) (7d39af3)
• cli: verbose auth login <provider> + accept ADR 0008 (#44) (95482ba)
• dist: conform to DECISIONS/0001 distribution channels (#122) (cfb6dad)
• make organization search functional + dependency refresh (SKA-475, SKA-503) (#20) (a144a7e)
• wire cobra CLI with viper config and the sting binary (14e4f8b)

Bug Fixes

• cli,server,config: stop token leak, add MCP panic recovery, harden config (#33) (438d1d6)
• clients: prevent query injection, rate-limit masking, and window drift (#34) (70a1035)
• credentials: honor isolation contract and stop losing credentials (#32) (71c7c9a)
• deps: bump Go to 1.26.5 and refresh modules, tools, and CI actions (#29) (b484575)
• mcpinstall: stop destroying user config on install/uninstall (#35) (4ae52a5)
• repair inert golangci-lint v2 config, dead coverage-skip branch, stale docs (#31) (5aa14a0)
• skip unreadable repos in org scope instead of aborting the scan (#23) (e2d1654)

Performance Improvements

• clients: bound routine queries by default (#37) (4affd0b)
• clients: fetch per-commit detail concurrently (#36) (f392a6a)

---

This PR was generated with Release Please. See documentation.