Merge fixup/release-1.0 to reconcile main and release-1.0 histories

Resolves diverged commit histories between main and release-1.0 that
were caused by duplicate squash-merge commits (c038522 vs 98581fa).
Keeps hardened code from HEAD for all conflicts.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: bhillkeyfactor