v0.2.0

Breaking

• Existing profiles stored in the data protection Keychain are no longer accessible — re-login each profile with codex-profile login <name>

Changed

• Switched from data protection Keychain to legacy ACL Keychain — swift build now produces a fully working binary without entitlements or provisioning profiles
• Removed migrate CLI command and all migration machinery

Removed

• Data protection Keychain backend (DataProtectionKeychainAuthVault)
• Dual-backend migration wrapper (MigratingAuthVault)
• Provisioning profile discovery and embedding
• "Migration needed" profile status in the UI