docs: portal changelog entry for v0.11.0

[Daily-AC]

Adds internal/portal/changelog/v0.11.0.md, which is what moves CurrentVersion() to v0.11.0 — the version is derived from the changelog file names, and TestReleasesNewestFirst requires the newest file to equal it.

What it covers

One bullet per merged PR since v0.10.0, in the voice of the v0.10.0 and v0.9.4 entries: Chinese, written for the person who owns the instance, each bullet opening with what changed for them and then the how and why.

PR	bullet
#106	the portal serves a filled-in WebFetch Agent Skill at /webfetch/skill, linked from the connect page, the help page and discovery's skill_url; discovery's instructions now render from the same catalog as wanctl help --instructions (#100)
#107	grants of 1–1440 minutes with four presets and a free field, default still 15; exec timeout_seconds to 14400; jobs per grant scaled per approved hour; the approval page's fine print on the session link staying valid, and Access tokens as the remedy (ADR 0010)
#108	on an Android device in bypass mode with the elevation channel on, elevated commands run and are logged; normal-mode devices now get a proper approval card with the command text; wanctl rules add --kind exec-elevated; script rules stored as a digest token; the app / prop / screenshot error on Android
#109	aborting a persistent-session command kills the shell with its process group / job and resets the session, with the lost cwd/env stated and --oneshot unchanged; says what still escapes (ADR 0011)
#105	wanctl update keeps a controller-only host controller-only; an agent whose pid was not recorded is no longer silently skipped on restart
#102	macOS screenshot failure names the Screen Recording permission and the restart
#103	the 17 inherited tool descriptions rewritten as operating instructions, and the corrected REFUSALS header

The closing paragraph states the operator impact: relay, portal and controlled agents should all upgrade because agent-side behaviour changed, no database migration, no new environment variables, and the Android APK changed only strings.

PR #104 is not in yet

fix(transport): acknowledge down-poll chunks (issue #57) was still OPEN at commit time, checked twice. Rather than announce an unshipped fix, the file ends with a clearly marked HTML comment naming the PR and giving the bullet text plus the one sentence the operator paragraph needs about the ack falling back on mixed versions. Resolve it before tagging: either merge #104 and fold the comment in, or delete the comment.

Verified

gofmt -l .                              # empty
go test ./internal/portal/... ./        # ok wanctl/internal/portal, ok wanctl

🤖 Generated with Claude Code