v0.1.0 - Initial runnable production kit

Initial public release. Includes local-only demo fixtures, FastAPI endpoints, tool auth and scopes, quotas, audit records, provider fallback boundaries, CI, README, tests, and production docs. No production secrets or external provider credentials are required.