secreq v0.1.0

Initial release.

Added

• Per-binary wraps. secreq wrap <bin> records how a binary's
  credentials are sourced (--env NAME=secret://…) and installs a PATH shim
  so every execvp of that binary — including npm postinstalls — routes
  through secreq x, resolves its secret:// refs, and injects the values.
• Multi-provider secret:// references. Resolve credentials from any
  store with a CLI — 1Password, macOS Keychain, pass, and more — behind a
  single reference syntax.
• Provenance-aware consent daemon. A long-lived daemon prompts (egui
  panel or terminal) before any secret is released, keyed on
  (wrap_name, ppid, parent_start_time); approvals are remembered for the
  lifetime of the requesting parent process. Concurrent requests in one
  process tree union into a single prompt.
• Auto-approval rules, including sandboxed WASM rules authored with the
  secreq-rule AssemblyScript SDK, wired through the rule model, evaluator,
  and daemon.
• secreq run — op run for every store: resolve ambient secret://
  refs (and --env-file entries) then exec a command with values injected
  and masked.
• Output masking on the wrapped command's stdout/stderr, with --raw
  to opt out.
• SSH agent support: the daemon signs on the SSH path and records each
  outcome to the audit log.
• Scoped remote secret agent serving secret:// refs to a guest VM over
  a scoped socket, with the host-declared scope as principal.
• Audit log of every resolve, sign, abandoned ask, and decision.
• SECREQ_BUILD_ID stamped at build time (build.rs); the CLI and
  daemon use it to detect and restart a stale daemon, and secreq --version
  reports it.