Release 1.1.0 — operator web UX + SEI conformance

[tachyon-beep]

Release 1.1.0

Cuts the 1.1.0 release. The 1.1.0 code already landed on main via PR #1 (operator-facing webUX MVP + SEI conformance consolidation); release/1.1.0 was identical to main, so this PR carries the release ceremony that makes the version real:

• Bump _version.py 1.0.0 → 1.1.0 (minor bump — additive, no breaking changes).
• Add the [1.1.0] CHANGELOG section + release link reference, drawn from the 35 commits since v1.0.0.

Merging this is the reviewable release gate; tag v1.1.0 after merge.

What 1.1.0 contains

• Operator web UI (plainweave web, optional plainweave[web] extra) — read-and-author mirror of the intent graph: intent dashboard (coverage / orphans / no-silent-clean banner), corpus browse, requirement detail & authoring (current-vs-draft, two-step approval), goals, and a unified review queue (drafts + trace links, accept/reject with required reason, drift-confirm).
• SEI conformance — Plainweave becomes the 4th SEI conformer; producer freeze (wire golden) for the Legis preflight-facts envelope.
• Security & hardening — CSRF middleware (body-preserving, cold-start 403 fixed), input-validation 400s, authority/operator-actor attribution, output hygiene, structural accessibility contracts + recorded manual AT gate.
• Docs — README install + coverage north-star, CONTRIBUTING, web UI quickstart, webUX design spec & implementation plan.

Compatibility

Additive and backward-compatible — the 1.0 CLI, MCP surface, store schema, and JSON envelopes are unchanged. The web UI is opt-in via the [web] extra and stays advisory and verdict-free.

Verification

• Full test suite green on the bumped state (uv run pytest).
• Resolved package version reports 1.1.0.

🤖 Generated with Claude Code