v1.1.0

The first feature release since the 1.0.0 baseline - 16 commits, 8 contributors' work, and one fix worth updating for on its own.

## Why update

**Privacy fix (#238):** if you registered a custom Typst (or other non-LaTeX) template, your personalized `cv/main_<company>.typ` files were *not* covered by the personal-data gitignore rules and would be committed to a public fork. The rules now cover `cv/main_*.*` and `cover_letters/cover_*.*` with the `*_example.tex` files still tracked. After updating, run `git status` once to confirm nothing personalized is staged.

## Highlights

- **Typst (and any compile-to-PDF toolchain) via `/add-template`** - templates declare their own compile command; the stock LaTeX templates are unchanged (#238)
- **freehire-search returns full descriptions in one request** - no more per-hit detail fetches during `/scrape` (#251)
- **Confirmed facts write back to your profile** - `/apply` and `/interview` no longer lose facts you confirm mid-conversation (#211)
- **Optional application-form prep sheet** as a third `/apply` artifact for postings with screening questions - opt-in, the default two-document output is unchanged (#212)
- **Dependency review is live** - CI now blocks PRs introducing dependencies with known high-severity vulnerabilities, on this repo and (self-activating) on forks (#254)
- **The extension model, documented** - README now spells out the three extension points and how to safely borrow a portal skill from another fork (prompted by #249)

Plus honesty rules for in-progress qualifications in the CV methodology (#210), mass-posting flags in `/scrape` (#207), pinned retry contracts across all portal CLIs (#246), and a batch of fixes - full details in [CHANGELOG.md](https://github.com/MadsLorentzen/ai-job-search/blob/master/CHANGELOG.md).

## Updating a personalized fork

Follow [SETUP.md section 8](https://github.com/MadsLorentzen/ai-job-search/blob/master/SETUP.md#8-pulling-upstream-updates-into-your-fork) - `python3 tools/check_upstream_updates.py` previews which of your personalized files this release touches before you merge. `framework_version` bumps in this release: `05-cv-templates.md` 1.2.1 -> 1.3.0.