docs: record 1.0.0 after 0.8.7

[Wibias]

What changed

• Bump package.json from 0.8.7 to 1.0.0.
• Keep the published [0.8.7] changelog section intact.
• Add [1.0.0] with only post-0.8.7 work: SHA-bound remote repository context from PR feat: add SHA-bound remote repository context acquisition #300 and the version bump.
• Update README 1.0.0 highlights, evidence model, internals, and current-state copy to match that delta.

Why

v0.8.7 is already published. The 1.0.0 notes must not absorb that release. Consumers need the first stable public version to describe only the work after 0.8.7.

Impact

Installers and release notes will report 1.0.0. Runtime behavior is unchanged in this PR. PR #299 remains documented under 0.8.7.

Validation

• node --test tests/unit/release-contract.test.mjs: 9/9 pass.
• releaseNotesForVersion() extracts exact 1.0.0 and 0.8.7 notes.
• scripts/pre-open-gate.mjs Wibias/github-delivery origin/main HEAD --evidence-file .tmp/v1.0.0-docs-preopen-evidence.json: decision=ready at 5714fff7e0bcae38a6bad54bf006d5747530f00e.

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 94017061-123c-4a2e-b72d-aaa7af223ebf

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}