chore(main): release 1.1.0

[roleme]

🤖 I have created a release beep boop

1.1.0 (2026-06-26)

Features

• add composite actions (privacy-scan, komodo-deploy) (#14) (fe2bcde)
• add gitleaks + privacy-scan reusables and pre-commit hook (#13) (2843cba)
• add pip-audit + trivy reusable workflows (#18) (a9e3134)
• add release-please + zero-cooldown automerge for shared reusables (#19) (69f6b8b)
• add reusable cleanup-ghcr workflow (#15) (1d7cdf2)
• enable transitiveRemediation for Renovate (fd8b7c7)
• extract reusable workflows + actions automerge in preset (#12) (fd888e6)

Bug Fixes

• add Node.js 24.x setup to Dependabot validate workflow (#9) (c56440a)
• disable gitleaks PR comments to keep least-privilege (#16) (fce34f0)
• grant gitleaks pull-requests: read for PR commit scan (#17) (46bccad)
• parse release version from PRS json; tag-move via API (no checkout) (#23) (6bab1e3)
• prevent script injection via validate-command input (#5) (c2f695e)
• use PAT for release-please so its PR triggers the required check (#21) (f7aa8b5)

---

This PR was generated with Release Please. See documentation.

[roleme]

🤖 Created releases:

• v1.1.0

🌻