Bump version to 1.0.0 and pin the donglora dep to >=1.0.0,<2.0.0 (PyPI), matching the freshly-published donglora 1.0.0 client.
Also knock out two preexisting lint failures surfaced by the release-time `just check` gauntlet:
* orac/crypto.py: drop the redundant int() wrap around round() (RUF046).
* orac/state.py: widen _state value type to include list[list[float]] so heard_positions type-checks under pyright.