Release EvidenceForge 1.9.0

[DavidJBianco]

Summary

Release EvidenceForge 1.9.0 from dev to main.

This release adds backward-compatible realism controls for:

• Proxy authentication realism via environment.proxy.auth_policy, including realistic unauthenticated allowlisted infrastructure traffic, mode: legacy, and opt-in non-human proxy principals.
• Beacon behavior profiles with beacon.profile, http_sequence, deterministic template tokens, and beacon_profiles.yaml config/overlay support.
• Storyline and red-herring event_spacing for human, automated, interval, and explicit-offset within-step timing.
• eforge eval alignment with current combined-format proxy_access.log output, rejecting obsolete W3C-style proxy rows so bad/old generated data fails validation instead of being accepted.
• eforge validate parity for red-herring beacon profile references.

Validation

• uv run ruff check . passed
• uv run ruff format --check . passed
• uv run pytest --include-slow --no-cov passed: 4624 passed, 28 skipped
• uv run eforge validate scenarios/iteration-test/scenario.yaml passed as valid with existing warnings/info
• uv run eforge validate-config passed: 0 errors, 0 warnings, 0 info items
• uv run eforge eval scenarios/iteration-test/blind-test/loop-310/data --scenario scenarios/iteration-test/scenario.yaml --verbose passed proxy parseability/spec cleanup: Parseability 100/100, Spec Conformance 100/100, Overall 97/100

Notes

• Version bumped to 1.9.0 in pyproject.toml, src/evidenceforge/__init__.py, and uv.lock.
• CHANGELOG.md includes the 2026-06-29 v1.9.0 release entry.