chore(release): prepare 0.0.11

[DavidBabinec]

What changed

• bump the package version and add the 0.0.11 changelog
• update every intentional deployment image pin to 0.0.11
• make the maintainer checklist enumerate all release version surfaces

Why

Prepare the verified main line for the v0.0.11 tag, GHCR image, and portable deployment bundle.

Release verification

• bun install --frozen-lockfile
• bun run build
• bun test (6,233 passed, 0 failed)
• bun run lint
• bunx tsc -b --pretty false
• bun run test:e2e (159 passed, 0 failed)
• fresh SQLite owner lifecycle from merged main: setup, sign-out/sign-in, edit, save/reload, password-step-up publish, anonymous public render, and unpublished-draft isolation
• bun run release:bundle -- 0.0.11
• bundle SHA-256: f2d169a2be08a5af90a936504cd2a4f8a90d8cf1ddffc4aa62519cce0da4e337