Request patch 0.1.1 artifact publication approval

[docushell-dev]

Summary

• add the patch 0.1.1 artifact publication approval-request validation record
• bind exact requested GitHub Release v0.1.1 CLI artifact names, checksums, source commit, workflow evidence, and bounded public wording
• wire the approval-request guard into release-candidate-prep
• keep publication, npm vendor refresh, npm publication, hosted surfaces, production positioning, Windows artifacts, bundled PDFium, and public benchmark claims blocked

Verification

• python3 .github/scripts/test_patch_0_1_1_artifact_publication_approval_request.py
• python3 .github/scripts/test_release_candidate_prep.py
• make light-check PYTHON=python3
• make release-candidate-prep PYTHON=python3

Manual Follow-up

No artifact upload is performed by this PR. After merge, the next manual step is explicit decider approval or rejection of the exact publication request.