release: bump public packages to 1.2.0

[tonyketcham]

Lockstep bump of every public package from 1.1.0 to 1.2.0. Files the
1.2.0 changelog from Unreleased.

After this commit is on GitHub, pnpm publish:ci publishes the npm
packages, tags v1.2.0, and opens the GitHub release from the filed
CHANGELOG.md section.

1.2.0

• flatbread proof install-skill installs the Proof skill that shipped
  with the running CLI and pins that same flatbread version as a
  devDependency (feat(cli): add proof install-skill so docs stay copy-pasteable #267). End-user docs now tell people to run
  npx --yes flatbread@latest proof install-skill, so README copy-paste
  blocks no longer need a version or git tag on every release.

Checklist

• New public CLI: flatbread proof install-skill
• Changes generate no new console errors
• Version and changelog only; no new tests required

Does this introduce any non-backwards compatible changes?

• Yes
• No

Does this include any user config changes?

• Yes
• No

Co-authored-by: Cursor cursoragent@cursor.com

---

Note

Low Risk
Version and changelog-only release metadata; no application logic changes in the diff.

Overview
Lockstep release prep for 1.2.0: every listed public package.json moves 1.1.0 → 1.2.0, and both Proof skill release.json files (.agents/skills/proof/ and packages/proof/skills/proof/) update flatbreadVersion, proofVersion, and gitTag to match.

CHANGELOG gains a filed ## 1.2.0 section (moved off Unreleased) documenting flatbread proof install-skill (#267): installs the skill from the running CLI, pins that flatbread version as a devDependency, and docs standardize on npx --yes flatbread@latest proof install-skill. No runtime or API code changes in this diff—publish/tag follows via pnpm publish:ci.

^{Reviewed by Cursor Bugbot for commit e576204. Bugbot is set up for automated code reviews on this repo. Configure here.}

[mergify]

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

• Queue this pull request