Release 2.1.1 (2026-06-02)

Features

• add template mode and identity gate for human-triggered PR submission
• consolidate merge + cleanup into vrg-finalize-pr with pre-merge provenance check