v0.13.1

• A pii.add refused by the product's backend is audited by the console
  as policy/failed with the client's peer (peer_uid, peer_pid,
  peer_user), also before the agent's first other call: a CheckMask
  refusal with the fixed error pii.add refused by the backend: invalid pattern and no pattern (neither the raw pattern nor the backend's
  text, which may quote it), a SaveMask refusal with the canonical
  pattern and mask rule not saved: <error>. PIIBackend is
  unchanged; products (locklog) no longer audit these refusals
  themselves, or the record is written twice (#142).
• README: the first line says lockkit is part of the Lock Family,
  harness security for AI agents (lockfamily#19).