Fix runtime compatibility found in real Mendix apps

[lucamykael]

Summary

• resolve default and named ESM exports for packaged pluggable widgets
• derive Runtime operation authorization from microflow roles, including page/nanoflow chains
• emit empty Gallery object-list properties instead of undefined
• reject visible Runtime security dialogs in browser acceptance
• release as 0.1.1

Verification

• 1041 examples, 0 failures
• 100% line coverage (17233/17233)
• 100% branch coverage (6824/6824)
• RuboCop: 244 files, 0 offenses
• installed-gem validate and preflight passed on MyFirstModule, LearnNow and SLATaskApp
• authenticated browser acceptance passed on MyFirstModule and LearnNow
• SLATaskApp Gallery failures were fixed; its remaining browser exception is from AppSwitcher.mpk calling the absent AppSwitcherModule.DS_CustomAuthentication microflow in the source app