11.1.0 (2026-09-21) Features 6400533 #9948 token: support read-write-stage-only granular access tokens (#9948) (@Tayvon, @Copilot) Bug Fixes c9876d7 #9882 provenance-file takes precedence over OIDC auto-generated provenance (#9882) (@yunseo-kim) b016aa2 #9913 config: avoid exporting persistent allow-scripts (#9913) (@Fnine59)