chore(release): v1.0.0 release tooling, notes, and E2E verification

[venkateshsakamuri-lab]

Summary

Rebased on latest main, redeployed the full native stack, ran end-to-end functional smoke (including Agent Q&A + dashboard generate), and added industry-standard GitHub release tooling for the official v1.0.0 cut.

E2E (native stack)

All checks green — details in docs/oss-ux/E2E_RELEASE_VERIFICATION.md:

• Health / auth / logout, Brain COMPLETED, /onboarding
• scripts/self-host/e2e-agent-check.py → AGENT_OK + DASH_OK (demo_shop)
• Security smoke: anonymous Prometheus 401, malicious kill PID 400
• Hermes loopback :8787

Ops notes fixed during redeploy: restarted provisioner (token-file support) and Hermes webui (stale MCP env without DEEPSQL_AUTH_TOKEN).

Release artifacts

Local builder: ./scripts/release/build-artifacts.sh v1.0.0 → release-artifacts/v1.0.0/

Artifact	Purpose
deepsql-1.0.0-source.tar.gz / .zip	git archive source
dba-agent-backend-1.0.0.jar	Spring Boot executable
deepsql-frontend-1.0.0.tar.gz	Production SPA
deepsql-mcp-0.27.0.tgz	CLI / MCP package
sbom-*.cdx.json	CycloneDX SBOMs
SHA256SUMS / SHA512SUMS + manifest.json	Integrity + inventory

CI: .github/workflows/release.yml publishes the same set on v*.*.* tag push.

After merge — cut the GitHub Release

git checkout main && git pull
git tag -a v1.0.0 -m "DeepSQL v1.0.0"
git push origin v1.0.0

See docs/oss-ux/RELEASE.md and docs/releases/RELEASE_NOTES-v1.0.0.md.

Test plan

• Full-stack redeploy + smoke matrix
• Agent + dashboard E2E script
• Local build-artifacts.sh v1.0.0 + sha256sum -c SHA256SUMS
• CI green on this PR
• After merge: push v1.0.0 and confirm GitHub Release assets