#287 chore(release): bump to 0.17.1

[Anonymous]

Originally created by: fu351

What this is

Release bump 0.17.0 → 0.17.1. Metadata only: the pyproject.toml version and the CHANGELOG restructure (Unreleased → a dated 0.17.1 section, fresh empty Unreleased). No code changes.

What 0.17.1 ships

The UX and machine-readable-output work already merged to main since v0.17.0, now cut as a release:

• UX fix wave (#252, [#261], [#265], [#266], [#267], [#268]) — shared verdict rendering (color-aware, pipe-safe, fixed-width labels), dash AA-contrast + a11y, auth auto-deny deadlines surfaced on every channel, wizard re-prompt resilience, dashboard → session-summary (old name kept as a hidden alias so SessionStart hooks keep working), dash arm-then-confirm Approve.
• Machine-readable CLI output (#207, [#208], [#210]) — scan --json/--quiet, doctor --json, policy-history --json, log --jsonl. Every JSON path emits an explicit allowlist of already-redacted columns, so a column added later can't leak into a machine stream by default.
• Docs (#263, [#264], [#209]) — docs/CLI.md, docs/REASON_CODES.md, README disclaimer cleanup.

Release mechanics

Merge → tag a GitHub Release v0.17.1 → publish.yml ships to PyPI over Trusted Publishing (OIDC). The audit-fix wave (proxy output-scan coverage, dash token leak, the AN- fixes) is held for v0.18.0*.

[Anonymous]

Ticket changed by: fu351

• status: open --> closed

[Anonymous]

Ticket changed by: fu351

• status: closed --> open

[Anonymous]

Ticket changed by: fu351

• status: open --> closed