chore: prepare v1.1.3 release

[gabedalmolin]

Summary

Prepare the next patch release after the runtime and deployment hardening landed on main.

What changed

• bump the package version to 1.1.3
• align the lockfile metadata to 1.1.3
• align the OpenAPI contract version to 1.1.3

Validation

• metadata-only change; behavioural validation is covered by the hardening PR already merged into main
• npm run lint
• npm run typecheck
• npm test
• npm run test:integration when the change affects infrastructure-backed paths

Risks/Notes

• This PR is intentionally limited to release metadata so the review and the release diff stay clean.
• The production promotion path will still re-verify the exact release ref before deploy.