feat: #3621656 Release Varbase News Base recipe 1.0.1

Release the Varbase News Base recipe 1.0.1, planned in #3621656.

What changed

• composer.json: version 1.0.x-dev → 1.0.1, and the five sibling dependencies pinned to their stable released constraints, the same shape 1.0.0 shipped:
  • drupal/varbase_components 4.0.x-dev → ~4.0.0
  • drupal/varbase_content_base 1.0.x-dev → ~1.0.0
  • drupal/varbase_media_base 1.0.x-dev → ~1.0.0
  • drupal/varbase_seo_base 1.0.x-dev → ~1.0.0
  • drupal/varbase_workflow_base 1.0.x-dev → ~1.0.0
• README.md: version badge and its pipeline link moved to 1.0.1.
• CHANGELOG.md: a 1.0.1 entry.

Why the ~4.0.0 constraint is valid right now

Varbase Components 4.0.1 was tagged as part of this release train, and the tag was pushed to both remotes: git.drupalcode.org and the github.com/Vardot mirror. That second half matters, because Packagist resolves vardot/varbase* from the GitHub mirror, and the mirror on this family has been running behind canonical. 4.0.1 is present on both, verified with git ls-remote, so ~4.0.0 resolves for a consumer rather than only inside drupal.org.

Payload of the release itself

Two commits since 1.0.0: task: #3621415 Update @vardot/varbase-e2e to ^2.0.4 and the previous release's chore: #3621104 Back to DEV. The harness move is a devDependencies change: it reaches no Composer constraint and changes nothing at runtime for a consumer. Test-infrastructure only.

AI-Generated: Yes

Checkpoints:

• File an issue
• Addition/Change/Update/Fix
• Testing to ensure no regression
• Automated unit testing coverage
• Automated functional testing coverage
• UX/UI designer responsibilities
• Readability
• Accessibility
• Performance
• Security
• Developer Documentation
• User Guide Documentation
• Reviewed by human
• Code review by maintainers
• Full testing and approval
• Credit contributors
• Review with the product owner