v0.5.1

TL;DR

• Sandbox now allows read-only access to SSH config and AWS config files - agents can resolve host aliases via ssh-agent and read region/profile settings without touching private keys or credentials.
• Fixed Landlock test that was asserting a capability Landlock doesn't have (AF_UNIX connect prevention).

Added

• Read-only access to SSH and AWS config in the sandbox - agents can now resolve SSH host aliases (via ssh-agent, no private key access) and read AWS region/profile settings; both backends (macOS sbpl + Linux Landlock) consume the shared PerFileGrants() contract

Fixed

• Landlock ctl_connect test downgraded from assertion to log - Landlock cannot prevent AF_UNIX connect() (FS-only LSM); grant-socket isolation on Linux requires Tier 2+