v1: align repository metadata and validate the complete release candidate #87

Completed in PR #90

• Repository/Pages links aligned with dragonsec-ai.
• Clean candidate suite: 378 tests, zero failures/errors, two expected platform/opt-in skips.
• Source/Javadoc artifacts, pinned performance/semantic snapshots, reviewed SpotBugs baseline and API regression gate pass.
• Independently compiled basic and RAG consumers pass.
• Primary JAR reproducible across clean builds; documentation site assembles.
• Candidate Linux/Windows CI, both RAG consumers, CodeQL and disposable signing/Central-bundle dry runs pass.

The reviewed candidate was merged in #90. Issues #86, #88 and #89 are closed.

Final release gate

• Prepare the signed exact-commit v1.0.0 tag through the protected release workflow.
• Stage the real 1.0.0 Central bundle and confirm actual credentials, signature/checksum metadata, namespace access and validation.
• A maintainer reviews and explicitly publishes the immutable Central version; verify clean public installation and mark the GitHub release stable.

The source line is 1.0.0-SNAPSHOT; the public artifact remains 0.1.0. TristanKruse is still the required maven-central environment reviewer (confirmed 2026-11-02). Lukas's separate Central publisher access has not been confirmed. No publication was performed as part of preparation.

See the evidence checklist, compatibility contract, and family feature review.