release: stage 5tratSmack 0.11.11 DEV

[WillItMod]

Summary

• Publish both compatible 5tratSmack DEV manifests at 0.11.11 with updated release notes and README metadata.
• Pin the application service and APP_IMAGE to the exact tested multi-architecture candidate from source bd3aa4dbb0e915c7593e461ebf09546654d49134: sha256:329b820a39beed7be4441d3c10ce694d7dedc579b62d494084bfcfe8c7755909.
• Preserve both CKPool references exactly at 0.11.3-rc.a992f40e96d4 and sha256:95a1a5f343d579206a0f8bb3c961cafa7500b5d487211a0cfb7b989cf34b895e.
• Strengthen the store validator so manifest aliases, README version, app source/digest, DEV channel, release phase, and CKPool immutability fail closed.

Verification

• Candidate app and retained CKPool tags resolve to the declared digests.
• Both manifest aliases are byte-identical.
• Standalone metadata validator and Python compilation pass, including a negative CKPool-mutation check.
• Docker Compose parses with the platform-provided app proxy image.
• All changed YAML parses and the GitHub workflow passes actionlint.
• Non-app image references are byte-identical to main and git diff --check passes.

Scope

This changes DEV catalogue metadata only. It does not promote the app tag, alter CKPool, modify user data, or touch unrelated applications.