chore(release): prepare 9.1.0 shadow-advice candidate

[vriesd]

Why

Flow has implemented bounded Jev shadow advice, but the published package is still 9.0.2. This candidate gives the next release an exact version and user-facing notes before its artifact is measured.

Scope

Set package.json to 9.1.0, update the three README installation pins, and add the 9.1.0 changelog entry. The notes describe Jev shadow advice when TYPESAFE_API_KEY is configured, the default-off path without a key, the opt-out flag, and the continued block on delegated recovery. Session v5 schema and validation and reviewer gates remain unchanged.

Tradeoffs

The changelog uses the candidate-preparation date. Release qualification binds the packed changelog bytes, so changing that date after paid measurement would require a new artifact and campaign.

Blast Radius

The package version and installation instructions change. This PR does not activate delegated recovery or publish a tag. Full two-provider release qualification, an exact-artifact canary, and sealed evidence remain required before publication.

Verification

bun install --frozen-lockfile, bun run release:metadata --tag v9.1.0, and the full push preflight passed. The full check recorded 1,586 passing tests and no failures. bun run replay matched 13 of 13 gated cassettes. FLOW_OPENCODE_SMOKE_VERSION=1.18.31 FLOW_LIVE_SMOKE=1 bun test tests/live-opencode-smoke.test.ts passed all 22 checks, including a model-free packed-plugin load. No paid provider calls ran.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-26T22:36:36.233396Z	0b813c9	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[vriesd]

Independent current-head verification at 0b813c9a9d193712b06543b3a70447bfcf87d6b0: PASS+NOTES.

All seven GitHub checks pass. bun run release:metadata --tag v9.1.0 validates the version and notes. bun run package:smoke packs and imports the plugin. The package version, three README install pins, and changelog heading agree, and the notes distinguish bounded shadow advice from unavailable delegated recovery. The branch is clean and mergeable.

Note: This is candidate merge readiness. Strict two-provider qualification and an exact-artifact canary have not run, so it does not authorize tagging or publication.