v0.3.0

Added

• A plan-webfetch PreToolUse hook that approves WebFetch while in plan mode, for
  http/https URLs only, so gathering context for a plan no longer prompts for every
  documentation URL. Every other permission mode is unchanged, and the neutralize hook still
  scans the fetched text (#37).

Changed

• The readonly-bash hook now decomposes compound commands — ;/&&/pipelines,
  for/while/until/if blocks, subshell ( ) and group { }, and command substitutions
  $(...), backticks and <(...) — and approves the whole only when every command inside is
  read-only, so plan mode stops prompting for read-only loops and substitutions. A write
  anywhere still falls through, and a reserved word used as an argument, such as grep -q done,
  is treated as data rather than syntax (#37).