Approve patch 0.1.1 artifact publication

[docushell-dev]

Summary

• record the explicit decider approval for publishing the exact patch 0.1.1 macOS arm64 and Linux x64 CLI artifacts
• bind the decision to the exact GitHub Release v0.1.1 asset names, SHA256 values, workflow evidence, source commit, and bounded public wording
• wire the approval-decision guard into release-candidate-prep
• keep actual upload pending as a separate operator action; npm vendor refresh, npm publication, hosted surfaces, production positioning, Windows artifacts, bundled PDFium, and public benchmark claims remain blocked

Verification

• python3 .github/scripts/test_patch_0_1_1_artifact_publication_approval_decision.py
• python3 .github/scripts/test_release_candidate_prep.py
• make light-check PYTHON=python3
• make release-candidate-prep PYTHON=python3

Manual Follow-up

No artifact upload is performed by this PR. After merge, run the pre-upload checks from the decision record, then attach only the approved assets to GitHub Release v0.1.1.