v1.25.8 - Packs run with permission bypass by default

Packs (e.g. Helio) now launch with Claude Code's permission bypass enabled by default in their isolated context, so a security harness that issues many tool calls doesn't stop for per-action approval prompts. It honors the global permission-bypass opt-out and only writes the pack context, never your account.

Also includes developer notes in the repo on the three-layer credential-seeding behavior (token + identity/state + the onboarding flag) behind reusing a Claude login in an isolated config dir.

Ships enigma-cli@1.25.8.