v0.1.8

• op.Op.CLIConfirmed makes the command line the confirmation of a
  destructive CLIImmediate operation: the CLI applies it without --yes
  or a prompt, and --dry-run still previews. HTTP and MCP still need
  "apply": true and "confirm": true. Add rejects it unless the effect
  is destructive and CLIImmediate is set. It shows as cli_confirmed in
  the metadata, x-cli-confirmed in OpenAPI and toolkit/cli_confirmed
  (mcp.MetaCLIConfirmed) in the MCP tool _meta, and the conformance kit
  checks that the CLI applies without --yes.