release: 0.1.0 stable

First stable release. Wire format frozen, public API stable.

- Add: deploy --remote (Model A host-side decrypt)
- Add: docs/10-decrypt-strategies.md
- Add: OIDC federation recipe in cicd-recipes
- Bump: 0.1.0-alpha.8 -> 0.1.0 (Node + Java)
- Update: README marked stable, CHANGELOG closed

Author: davidalmeidac