v1.1.6

[CoderLuii]

Summary

• refresh Node.js, source-built CLIs, OpenCode, Claude Code, Claude Auth, npm tools, Python locks, Docker Scout, and Trivy
• add native AMD64 and ARM64 pull-request image validation
• advance release and rollback metadata from v1.1.5 to v1.1.6

Compatibility decisions

• retain TypeScript 6.0.3; TypeScript 7.0.2 remains deferred until every bundled programmatic consumer is compatible
• retain Paperclip 2026.722.0 with reviewed Undici 6.28.0
• retain pip vendored msgpack 1.2.1 and pkg_resources 80.9.0

Validation

Passed locally:

• 43 Python unit and release-contract tests
• workflow pin validation
• Chromium seccomp validation
• JSON, YAML, and both Compose configuration checks
• Renovate 44.24.2 extraction validation

Native image evidence is assigned to this draft PR's AMD64 and ARM64 jobs. The local AMD64 Docker build exceeded its bounded ten-minute window after the verified fzf patch-context correction, so local image and plugin smokes are not claimed as passed.