Release 0.1.1

[karim-semmoud]

Summary

Patch release 0.1.1 with security hardening and bug fixes

• Bump corex and corex_new to 0.1.1 (mix.exs, installer/mix.exs, package.json, installer fallbacks, e2e/assets/corex/VERSION)
• Add 0.1.1 entry to CHANGELOG.md

Fixed

• Toast: Sanitize action URLs; dispose toast group on hook destroy
• Menu: Fix submenu subscription accumulation
• DataTable: Harden sort and selection against forged client params
• Pagination: Validate page URLs; omit unsafe data-to
• Redirect: Validate redirect destination schemes
• Combobox, Date Picker: Reduce unnecessary re-renders
• MCP: Security hardening
• Docs: Restore mix corex.new on Hexdocs

Test plan

• mix pre.publish passes (hex.audit, lint, test, assets.build)
• mix docs builds without the Corex.MCP.Server hidden-module warning
• CHANGELOG.md lists all user-facing fixes for 0.1.1
• Version is 0.1.1 in mix.exs, installer/mix.exs, and package.json