release: bump to v0.11.5; add RTD stable trigger to release workflow

- pyproject.toml, __init__.py: 0.11.4 → 0.11.5
- release.yml: add rtd-publish job that triggers RTD stable + latest
  builds after PyPI publish succeeds (mirrors dev-release.yml pattern)

Release notes (since v0.11.4):
- Security: fix CodeQL py/path-injection false positives in governance_logic.py
  (dismissed 6 alerts; validated project root with _safe_resolve + inline
  literal child paths matching existing _read_confidence_threshold pattern)
- Fix: ruff formatting and 4 broken MkDocs strict-mode doc links
- Chore: update GitHub repo topics and About description

Co-Authored-By: Oz <oz-agent@warp.dev>

Author: tbitcs

.github/workflows/release.yml

@@ -88,3 +88,38 @@ jobs:
         uses: pypa/gh-action-pypi-publish@release/v1
         with:
           skip_existing: true
+
+  rtd-publish:
+    needs: pypi-publish
+    runs-on: ubuntu-latest
+    continue-on-error: true
+    steps:
+      - name: Trigger ReadTheDocs stable build
+        env:
+          RTD_TOKEN: ${{ secrets.RTD_TOKEN }}
+        run: |
+          if [ -z "$RTD_TOKEN" ]; then
+            echo "WARNING: RTD_TOKEN not set — skipping RTD trigger."
+            exit 0
+          fi
+          TAG="${{ github.ref_name }}"
+          echo "Triggering RTD builds for tag ${TAG}..."
+
+          # 1. Trigger the 'stable' version build (auto-tracked from latest tag)
+          STATUS=$(curl -s -o /dev/null -w "%{http_code}" -X POST \
+            -H "Authorization: Token $RTD_TOKEN" \
+            "https://readthedocs.org/api/v3/projects/specsmith/versions/stable/builds/")
+          echo "RTD stable build trigger: HTTP $STATUS"
+
+          # 2. Point 'latest' at main so it tracks the stable release
+          curl -s -o /dev/null -X PATCH \
+            -H "Authorization: Token $RTD_TOKEN" \
+            -H "Content-Type: application/json" \
+            -d '{"identifier": "main", "active": true}' \
+            "https://readthedocs.org/api/v3/projects/specsmith/versions/latest/"
+
+          # 3. Trigger a fresh 'latest' build (now tracking main)
+          LATEST=$(curl -s -o /dev/null -w "%{http_code}" -X POST \
+            -H "Authorization: Token $RTD_TOKEN" \
+            "https://readthedocs.org/api/v3/projects/specsmith/versions/latest/builds/")
+          echo "RTD latest build trigger: HTTP $LATEST"

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "specsmith"
-version = "0.11.4"
+version = "0.11.5"
 description = "Applied Epistemic Engineering toolkit — AEE agent sessions, execution profiles, FPGA/HDL governance, tool installer, 50+ CLI commands."
 readme = "README.md"
 license = "MIT"

src/specsmith/__init__.py

@@ -8,4 +8,4 @@
 try:
     __version__: str = _pkg_version("specsmith")
 except PackageNotFoundError:  # running from source without install
-    __version__ = "0.11.4"  # fallback: keep in sync with pyproject.toml
+    __version__ = "0.11.5"  # fallback: keep in sync with pyproject.toml