chore(sdk-typescript): prepare 0.1.1 release

[fuller]

Summary

Bumps @gemini-markets/sdk from 0.1.0 to 0.1.1 in the package metadata and lockfile so the merged OAuth PKCE implementation can be published under the next release version.

This PR is limited to packages/sdk-typescript/** and contains no Go changes.

After merge, create the annotated release tag typescript-sdk-v0.1.1 on the resulting main commit. The publish workflow verifies that the tag version matches package.json and that the tagged commit is on main.

Verification

• 635 tests passing
• Typecheck passing
• Package, browser, and API-surface verification passing
• npm audit --omit=dev: 0 vulnerabilities

[nostradamus-bot]

Nostradamus Risk Rating — Low

PR #45 changes only the "version" string in packages/sdk-typescript/package.json and its lockfile from 0.1.0 to 0.1.1; the security-critical exports map controlling browser/server build routing is entirely untouched, and no auth, crypto, or financial-transaction logic is modified.

[sdlc-pr-bot]

Change Control Evidence Check

Authorization — ❌ Fail

Evidence:

• Linear ticket: ⚠️ No ticket linked
• Change owner: Andrew Fuller
• Type of change: Normal

Testing — ✅ Pass

Evidence:

• Tests from CI checks: ➖ No tests ran
• Security scans: ✅ Passed
• Testing summary: ✅ Found in PR description
  • Summary: All 635 tests passed with successful typecheck validation, package/browser/API-surface verification, and zero vulnerabilities detected in npm audit (dev dependencies omitted).
• Evidence link: View run

Approval — ✅ Pass

Evidence:

• Approver: Jimmy Huang
• Approval source: GitHub PR Review
• Approval timestamp: 2026-08-29 15:22 UTC

Segregation of Duties — ✅ Pass

Validated:

• PR author: Andrew Fuller
• Commit author(s): fuller
• Approver: Jimmy Huang
• Result: Implementer and approver are different people ✅

---

Last checked: 2026-08-29 15:22 UTC

↩ Re-run Clarissa if tickets, CI, or approvals have changed.