Add post-1.0 compatibility follow-up

[humandebri]

Summary

• Add the published 1.0.0 compatibility fixture and gate 1.0.0 -> current with PocketIC.
• Run npm run test:pocketic:compat in both PR CI and tag release workflow before the final root wasm build so release upload/import checks use the intended artifact.
• Move GitHub Actions runtime actions to Node 24-compatible major versions.
• Declare MSRV as rust-version = "1.95.0" and guard it against rust-toolchain.toml drift.
• Update release and operations docs from post-release TODOs to active compatibility policy.

Audit note

• v1.0.0 was moved once before crates.io publish to include the release guard fix that compares peeled tag commits for annotated tags.
• The published tag, GitHub Release, wasm artifact, and crates.io package are not changed by this PR.

Testing

• rg -n '0\\.2\\.2|1\\.0\\.0|node20|node24|rust-version|checkout@|setup-node@|action-gh-release@' .github Cargo.toml docs package.json scripts tests compat-fixtures
• rg -n 'sqlite-critical-check|test:pocketic:compat|cargo build --target wasm32-unknown-unknown|test:pocketic:perf|Check wasm imports|action-gh-release' .github/workflows
• scripts/check-release-version.sh
• scripts/check-release-package.sh
• git diff --check
• cargo fmt --check
• cargo fmt --check --manifest-path compat-fixtures/ic-sqlite-vfs-1-0-0/Cargo.toml
• cargo test --test public_api
• cargo test --tests
• cargo build --target wasm32-unknown-unknown
• cargo build --target wasm32-unknown-unknown --features canister-api
• npm run test:pocketic:compat
• wasm-objdump -x target/wasm32-unknown-unknown/debug/ic_sqlite_vfs.wasm

[humandebri]

@codex reveiw

[chatgpt-codex-connector]

To use Codex here, create an environment for this repo.