v1.1.0

Added — #[Sensitive] attribute to mark settings properties whose values must never be displayed. The previous name-based heuristic (key, secret, password, token) remains as a fallback, so nothing that was hidden before becomes visible.

Fixed — env-settings:diff did not mask anything, printing values that env-settings:show hid. Both commands now share one rule. The diff still compares real values before masking, so a sensitive property is flagged as differing without being revealed.

Masking is display-only; toArray() continues to return real values.

Full Changelog: v1.0.0...v1.1.0