Approve patch 0.1.1 npm publication decision

[docushell-dev]

Summary

• record decider approval for the exact patch 0.1.1 npm publication decision packet
• bind @docushell/ethos-pdf@0.1.1 to the accepted npm tarball metadata, durable vendor payload checksums, CLI smoke, and PDFium boundary
• update the decision guard, validation index, and changelog boundary exception

Boundaries

• does not run npm publish
• leaves operator publish pending as a separate credentialed action after merge and pre-publish checks
• does not change public claims, production positioning, hosted surfaces, Windows artifacts, bundled PDFium, ethos-doc, ethos-rag, or benchmark claims

Tests

• python3 .github/scripts/test_npm_publication_final_approval_decision.py
• python3 .github/scripts/test_npm_publication_final_approval_request.py
• python3 .github/scripts/test_npm_tarball_candidate_evidence.py
• python3 .github/scripts/test_npm_binary_package_scaffold.py
• npm test --prefix packages/npm/ethos-pdf
• make light-check PYTHON=python3
• make release-candidate-prep PYTHON=python3
• git diff --check