Prepare Protocol-Commercial v1.1.0 release — flat v1.1.0 schemas, examples, docs, and CI

[GsCommand]

Motivation

• Move the repository from a v1.0.0-centered, shared-fragment layout to a clear, publishable v1.1.0 current line that aligns with Commons/Agent-Cards v1.1.0 and treats x402 as first-class for payment/settlement semantics.
• Enforce a flat, self-contained schema style (Option A) so each request/receipt is inspectable without chasing _shared fragments and is easy for Agent Cards and mirrors to bind.
• Strengthen commercial typing around payment, authorization, settlement, fulfillment, and verification while keeping execution/runtime concerns out of the canonical artifacts.

Description

• Bumped package and release metadata to 1.1.0 and updated package.json main/exports, manifest.json (now pointing at schemas/v1.1.0 and marking v1.0.0 as legacy), and added schemas/v1.1.0/index.json.
• Added ten self-contained v1.1.0 schemas (request + receipt) under schemas/v1.1.0/commercial/{authorize,checkout,purchase,ship,verify} with deterministic $id values under https://commandlayer.org/schemas/v1.1.0/....
• Added a full example suite under examples/v1.1.0/commercial/<verb>/{valid,invalid} (valid and invalid request + receipt fixtures for all five verbs).
• Rewrote docs and release artifacts (README.md, SPEC.md, ONBOARDING.md, POLICY.md, GOVERNANCE.md, RESOLUTION.md, SECURITY.md, SECURITY_PROVENANCE.md, COMPLIANCE.md) to reflect v1.1.0, flat schemas, x402-first posture, and release rules.
• Updated validation tooling and CI to target v1.1.0 by rewriting scripts/validate-all.mjs, scripts/validate-examples.mjs, and scripts/generate-checksums.mjs and adjusting .github/workflows/validate.yml to run the new checks; CI now validates the v1.1.0 tree, examples, and regenerates checksums.
• Regenerated checksums.txt to cover the v1.1.0 index, schemas, examples, and manifest so the integrity surface represents the current release candidate.

Testing

• Ran npm run validate (which runs validate:schemas and validate:examples) and it completed successfully with strict Ajv compilation of the v1.1.0 schema set. (Result: succeeded.)
• Ran npm run generate:checksums and the script wrote the new checksums.txt for the release artifact set (Result: succeeded; 32 release checksums written).
• Verified artifacts with sha256sum -c checksums.txt and the listed examples, schemas, and manifest all passed (Result: all OK).
• Performed npm install --package-lock-only to ensure lockfile coherence (Result: succeeded).

---

Codex Task