v0.7.0

Fixed

• Repeated external_directory permission prompts when agents read bundled references in plugin install mode: the load-time config hook now registers an in-memory allow scoped to the package's own assets/* directory, preserving existing rules and respecting an explicit global deny (#11)