- redact spawn debug line — stop printing the resolved --mcp-config
  payload and full system prompt to stderr; print a sanitized summary
  (harness, model, MCP server names, permission rule counts, mode)
  so Bearer tokens can no longer leak into terminal or CI logs
- validate optional fields in local-personas parseOverride —
  skills/env/mcpServers/permissions/tiers were cast blindly, letting
  malformed JSON (e.g. env as an array, tiers.best as a string) reach
  downstream spread/merge code. Added targeted shape checks so bad
  files surface a clear per-file warning instead
- add tests covering env/mcpServers/permissions propagation through
  resolvePersona and resolvePersonaByTier, plus a negative case on a
  persona that declares none of them
- docs: packages/cli/README.md install now references
  @agentworkforce/cli (not the router); bearer header example uses
  braced ${POSTHOG_API_KEY} so it actually interpolates; fix stale
  resolveEnvRef reference in McpServerSpec docstring

Copilot #3 (trailing comma in root README.md:88) is a false positive —
the JSON block parses cleanly via python json.tool; leaving that
block unchanged and replying on the PR.