docs: record the 1.1.0 release and add the infrastructure map

Release notes for 1.1.0 were split between an Unreleased section and the
version section, so the published notes would have omitted the update-feed
and desktop changes. Everything shipping in this version now sits under one
`## [1.1.0]` heading.

`docs/map/` becomes the entry point for what infrastructure exists per
platform and how far each feature is developed, with a documented update
protocol so feature work and this map do not drift apart again. The release
guide now states that installer binaries live in the update feed rather than
the repository.

CHANGELOG.md

@@ -22,6 +22,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - **Generated-content safety controls**: added generation receipts, shared generative-AI safety instructions, and an authenticated report flow for owned AI-generated meeting documents.
 - **Release verification tooling**: added Android artifact, App Links, production Firebase/AdMob configuration, Play asset, secret scanning, signed provenance, and publication-boundary checks.
 - **Complete mobile icon set**: added canonical Android legacy/adaptive/monochrome launchers, the 512px Play icon, and all required iPhone, iPad, and App Store marketing icon slots.
+- **Canonical desktop release channel**: desktop auto-update now reads one Forgejo Generic Package Registry feed, published by a version-agnostic publisher (`scripts/ci/publish-forgejo-release.mjs`) from a tag-triggered Forgejo Actions workflow. GitLab CI and GitHub Actions converge on the same publisher, and the GitLab registry stays a legacy mirror for pre-Forgejo installs.
+- **Update policy SSOT** (`release/update-policy.json`): channels (`latest`/`beta`/`alpha`), minimum supported version, forced install, full-installer thresholds, staged rollout percentage, and a remote kill switch, enforced at runtime by `apps/desktop/src/main/update-policy.ts`.
+- **Dictionary import/export on desktop and web**: round-trip import with per-entry conflict reporting, a web dictionary client, and an expanded knowledge add form.
+- **Multi-transport push delivery**: Web Push (VAPID) and token-based Apple Push (APNs) transports join Firebase Cloud Messaging, with a Cloudflare Worker cron drain over an outbox table.
+- **Team activity feed**: team activity events, migration, and the web feed component.
+- **Shared entitlement gating** in `@d3ro/core` for free/paid feature boundaries.
+- 21 unit tests for update policy decisions and feed helpers, plus tests for dictionary I/O, entitlements, push drain, Web Push, and APNs payloads.
 
 ### Changed
 - Unified mobile authentication and invitation links on the canonical `d3ro-voice` app scheme and added fail-closed verification for the HTTPS App Links contract.
@@ -32,6 +39,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Finalized benchmarked `ko-KR`/`en-US` Play listing copy and a Console-previewed
   1024×500 canonical feature graphic with preserved generation prompt, source,
   output, and hashes.
+- Desktop runtime updater feed moved from GitLab project 1172 to the canonical
+  Forgejo registry; `electron-builder.yml`, the metadata verifier, and both CI
+  publishers now enforce the canonical/mirror split.
+- Release metadata verifier self-test expanded to 13 negative cases covering the
+  feed contract, policy schema, and Forgejo publisher invariants.
+- Landing site and web console download centers now link the canonical Forgejo feed
+  instead of repository-local installer paths, which are not part of any deploy
+  artifact.
+- Admin console data views (models, pipelines, users, subscriptions, audit log) read
+  live back-office data, with a unified sidebar and console theme.
+- Desktop settings, ad surfaces, license, and meeting-export UI aligned on the shared
+  theme tokens; meeting export filenames now go through one sanitizer.
 
 ### Security
 - Added atomic authorization and replay protection for teams, invitations, push delivery, transcription quotas, billing, ad rewards, administrative actions, data portability, and content reports.
@@ -43,6 +62,11 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Fixed
 - Corrected realtime Edge Function model routing and type checks for team and enterprise tiers.
 - Removed the legacy `d3ro://` deep-link surface to prevent divergent authentication callback identities.
+- Removed the Forgejo release-publishing prohibition; the legacy hardcoded-version
+  script is replaced by a version-gated publisher.
+- Dropped a stale admin bundle from the API server web root, and stopped tracking
+  .NET build output, Playwright run output, and developer-only automation scripts in
+  the release checkout.
 
 ## [0.2.1-alpha] - 2026-07-22