Engineering report: kzero v1.1.3

v1.1.3 (2026-09-27) is a security patch on the 1.1.x line: transitive google.golang.org/grpc v1.83.2 and go.opentelemetry.io/otel/sdk v1.45.0 (Dependabot). No schema or CLI behavior changes.

What changed

Product context

Functional contract is unchanged from v1.1.0 / v1.1.1. See the v1.1.1 engineering report for bastion-first model, Bash→YAML examples, and diff / job / cronjob notes.