chore(release): v0.1.1

[mpge]

Release 0.1.1. Changes CHANGELOG.md and version in build.gradle.kts.

Contains:

• fix(security): gate admin and agent APIs, unblock inbound email and API tokens #90: the admin API requires an admin and the agent API an agent or admin, inbound email is accepted again, valid API tokens authenticate, and the token filter no longer runs on the host's own routes.
• fix(db): run Escalated's migrations itself, on PostgreSQL and MySQL #91: Escalated runs its own migrations on PostgreSQL and MySQL, into escalated_flyway_schema_history. V11 creates the tables and columns the entities map that no migration did, and installs whose host Flyway applied the old scripts are adopted.
• fix(events): deliver webhooks and workflows after commit, and publish reply events #92: webhooks and workflows run after commit on another thread, reply events are published, and workflow JSON columns are bound as JSON.

Upgrade notes:

• Host users with no admin or agent profile (or ROLE_ESCALATED_ADMIN / ROLE_ESCALATED_AGENT) now get 403 on those APIs.
• Migrations move to db/escalated/{postgresql,mysql} and run on startup (escalated.datasource.migrate, default true). Existing MySQL checksums still match.
• @EnableAsync now applies application-wide.

https://claude.ai/code/session_01CpChRGTQrUiPqfamwzoidT