[backslash-f]

Summary

• bump CloudKit MCP and end-user setup references to 0.1.1
• remove the one-time bootstrap reconciliation now that the npm package exists
• require the exact release version to be unpublished before OIDC publication
• add executable negative-path coverage for existing versions and registry failures

Validation

• npm run check
• git diff --check
• 86 tests pass, including registry publication guard coverage

Release context

• 0.1.0 is live and installation-verified
• its release workflow safely stopped because independently packed tarball bytes differed
• this release path publishes 0.1.1 only through the configured npm trusted publisher
• no package or GitHub release was created by this PR

[backslash-f]

Exact-head Reasoning Relay review: APPROVED.

• Base: b8b15e804e2444aa32f784732a18c075ea8d71e4
• Head: 98386aad0a43524acf0d8197942bcf932be9a7d4
• Response hash: fb00cc92786ecc8791f29e12e2d95a3ab19221c3696099c495de483c4f7fcd1a
• Decision: no P0/P1 findings; suitable to merge and release as 0.1.1.
• Exact-head CI run 34838863532 is green.

Non-blocking hardening ideas: fuller manifest validation in the registry guard, CLI-path tests, and symmetric documentation-version checks.