v0.10.1 — OSS hygiene and safer routing

v0.10.1 — OSS hygiene and safer routing

Public-tree cleanup and control-plane fixes. GitHub Latest was stuck on v0.6.0; main had already moved through 0.10.0 unreleased work.

Added

• Token-boundary task keywords (rl no longer matches world)
• Route JSON: sandbox_mode, approval_policy, remote_allowed
• hardened-exec SubagentStart/Stop logging (hooks/isolation_guard.py)
• docs/runtime-isolation.md
• CoC, SUPPORT, issue/PR templates

Changed

• adopt-local wraps claude + codex only (--with-hermes / --with-grok opt-in)
• Doctor: unwrapped Hermes is PASS
• skill-audit / open-source-check stay inside this repo
• Missing dist/SHA256SUMS is WARN on a source checkout
• Disabled Actions templates pin actions/checkout to v4.2.2 SHA

Removed

• Operator-only Builderz client disk scripts