release: prepare v0.1.1 UX patch / 发行：准备 v0.1.1 体验补丁

[tiye]

中文

范围

• 准备 release: prepare v0.1.1 UX patch / 发行：准备 v0.1.1 体验补丁 #288 的 v0.1.1 补丁版本：同步主 crate 与 fuzz 锁文件版本，新增中英 changelog，保留 0.1.0 历史记录。
• 在现有干净解包验收中，用归档内入门任务的临时副本验证“改坏规则 → qtest 失败并提示原因 → 恢复规则 → qtest 通过”。四个平台及无 checkout 下载验收沿用同一流程。
• Windows 安装测试仅在本地演练副本中将文档版本替换为候选归档版本；README 与公开下载指南仍指向已存在的 v0.1.0。

验证

• PR CI 全绿：四平台发行构建、bundle checksum、无 checkout 下载验收、Windows 成功路径与 10 个注入失败场景、Rust stable/1.85、安全审计及性能对照均通过。
• 本机通过 python3 scripts/test_release.py、python3 scripts/release.py version --tag v0.1.1、cargo test --locked、cargo fmt --check、git diff --check，并用 Apple silicon 真实归档通过 verify-archive 与 verify-install。
• cargo package --locked --allow-dirty --offline 和 fuzz crate 的锁文件元数据检查通过。本机代理不可用，常规联网打包未完成；CI 的联网 crate 打包已通过。

发布边界

本 PR 只做准备，不关闭 #288；未创建 tag、GitHub Release，也未发布 crates.io。正式打 v0.1.1 tag 和发布仍需用户确认。发布并验证真实下载制品后，才将默认下载说明切换到 0.1.1。

English

Scope

• Prepare the v0.1.1 patch for release: prepare v0.1.1 UX patch / 发行：准备 v0.1.1 体验补丁 #288: align the main crate and fuzz lockfile versions, add bilingual changelog notes, and retain the 0.1.0 history.
• Extend the existing clean-install check using a temporary copy of the archived starter: break the rule, require a failing qtest with the expected diagnosis, restore the rule, and require a passing qtest. All four platforms and no-checkout distribution verification reuse this path.
• The Windows install test substitutes the candidate archive version only in its local rehearsal copy. README and public download guidance still point to the existing v0.1.0 release.

Validation

• All PR CI checks passed: four platform builds, bundle checksums, downloaded-bundle verification without a checkout, the Windows success path and 10 injected failures, Rust stable/1.85, security audit, and performance comparison.
• Locally passed python3 scripts/test_release.py, python3 scripts/release.py version --tag v0.1.1, cargo test --locked, cargo fmt --check, and git diff --check. A real Apple silicon archive passed verify-archive and verify-install.
• cargo package --locked --allow-dirty --offline and locked fuzz-crate metadata verification passed. The local proxy blocked online packaging; CI passed its networked crate package check.

Publishing boundary

This PR prepares but does not close #288. No tag, GitHub Release, or crates.io publication was created. Creating the v0.1.1 tag and publishing still requires user approval. Default download instructions move to 0.1.1 only after the published artifacts are downloaded and verified.