Kernl 0.1.1

Fixed

• Native packages serve the dashboard again: the staged SPA lives at dashboard/, which none of the static-directory candidates matched, so every .deb, .rpm, .dmg and .msi returned 500 at / while the API answered normally.
• RPM no longer generates dependencies against the vendored tree, and drops the sqlite dependency that blocked RHEL rebuilds.
• Release publication: artifact casing, license metadata, tag guard, macOS runner pinning, and a CI check that keeps the npm lockfiles in sync with package.json — drift there is what made a tagged release ship with no assets at all.