chore: release 2.1.1

[DavidJBianco]

Summary

• unify package-owned record validation across CLI preflight, generation, and evaluation
• preserve complete Windows Snare facts and validate historical/current SOF-ELK compatibility
• correct failed-logon requester, authentication-target, and DC semantics
• improve Splunk web/proxy evaluation and checkpoint compatibility
• update the SOF-ELK pin and harness to the validated upstream parser revision
• release EvidenceForge 2.1.1

Validation

• uv run ruff check .
• uv run ruff format --check .
• installed package and source versions both report 2.1.1
• feature PR CI passed on Ubuntu, Windows, Windows checkpoint durability, lint, and Required CI
• full local SOF-ELK ingest passed for 119,532/119,532 records across 18 supported families
• external parser compatibility tests: 5 passed
• routine local suite: 11,640 passed, 48 skipped, 2,026 deselected

Release

• SemVer patch bump from 2.1.0 to 2.1.1
• CHANGELOG.md covers every non-merge commit since 2.1.0
• pyproject.toml, src/evidenceforge/__init__.py, and uv.lock agree on 2.1.1
• remote tag v2.1.1 is currently absent