Tags: Alexlambertz/SubControl

Release v1.1.1

Changes since v1.1.0:
- Security hardening: IDOR/bucket access control, SSRF guard, security
  headers, scoped dashboard/search/AI chat, CSV size limit, secret key guard
- Fix subscription edit crash (providers/categories API now authenticated)
- Fix FastAPI 0.136 startup crash (204 routes require response_class=Response)
- Mobile subscription list: two-row responsive layout
- E2E chat test: target assistant bubble by CSS class
- CI: upgrade all actions to Node.js 24-native versions

Release v1.1.0

Highlights:
- Mobile-responsive layout (collapsible sidebar, two-row subscription rows)
- OIDC token refresh (proactive timer + reactive 401 retry)
- Per-user AI chat history
- end_date support on subscriptions (billing stop date)
- WallOS import anchor fix (last-payment semantics)
- CSV import auto-fetches logos; manual logo regeneration in Settings
- AI settings configurable via env vars, overrideable in Settings UI
- Admin-only Users and Settings pages
- Docker image published to ghcr.io/alexlambertz/subcontrol
- Security hardening: bucket IDOR fixes, SSRF guard, security headers,
  scoped dashboard/search/AI chat, CSV size limit, secret key guard