v0.1.1

Codex 0.163 provider injection, Gemini 0.58+ settings overlay and --trust-workspace, immediate cap trip incl. thinking tokens, input estimator now counts system instructions, refused-request accounting, agentcap demo. Tested with real codex/gemini CLIs against a local fake upstream, not yet with real paid keys.