Backport v1 to main for v1.1.0

[crohr]

Context

The stable v1 branch now contains the complete local buildcurl coordinator, sibling compiler containers, toolchain caching, and the workflow follow-up that tracks pkgr master immutably. main still points at the v1.0.2 implementation.

Root cause

The local compiler rollout was developed and validated on the stable release branch so existing pkgr/action@v1 consumers could be tested before updating the repository source branch and immutable release tag.

What changed

• Backport the tested v1 branch directly into main.
• Preserve the exact implementation and generated action bundles already exercised by PR and application E2Es.
• Avoid cherry-picks, duplicate commits, or compatibility-only code.
• Prepare the landed main commit for the immutable v1.1.0 tag.

Validation

• npm test — 12/12 passed
• npm run build and git diff --exit-code -- package/dist
• actionlint .github/workflows/test.yml .github/workflows/scheduled-e2e.yml
• git diff --check origin/main...origin/v1
• PR Follow pkgr master in E2E workflows #5 CI — all recipe and Ruby, Node, and Python application E2Es passed
• blank-sinatra-app master pipeline — EL 10, Ubuntu 26.04, and SLES 16 passed
• Adversarial correctness/security review — clean
• Architectural review — clean

[crohr]

@codex review

[crohr]

@codex review