Prepare codex-profile-sync 0.1.1 release

[GreenLv]

Summary

• bump package and documentation versions to 0.1.1 and enforce version consistency
• update author and project metadata and add a changelog
• make pipx and uv tool the primary installation paths
• pin existing GitHub Actions to immutable commits
• add a token-free Trusted Publishing workflow with separate TestPyPI and PyPI environments

Local validation

• pytest: 26 passed
• Ruff and public-tree audit: passed
• wheel and sdist build plus strict package checks: passed
• clean wheel installation reports version 0.1.1
• temporary source/home workflow init -> plan -> apply -> doctor: passed
• conflict refusal and redacted JSON behavior: passed
• branch CI: 9 jobs passed

Remaining release gates

This PR intentionally remains a draft until the GitHub environments and pending Trusted Publishers are configured and the actual TestPyPI 0.1.1 artifacts pass installation smoke. No production PyPI publication should occur before those gates.