v0.1.2

Ships the hook from @nodrail/client 0.1.2.

What changed

Security fixes found by an independent review. Upgrade.

• guard() no longer leaves a tool unchecked because of its shape. A provider
  tool that still runs locally, an MCP SDK registered tool (callback), or a
  tool that runs through run() passed through untouched in 0.1.0 and 0.1.1.
  Anything with code of its own is now checked, or refused with an error if its
  shape isn't recognised. A tool can no longer mark itself as already checked.
• The credential is never sent over plain http, except to this machine. Other
  addresses block with INSECURE_URL.
• Redaction fixes from @nodrail/policy-engine 0.1.2.
• A credential loaded after the tools were wrapped is picked up.
• MCP SDK registered tools are supported.
• Types now work with moduleResolution: nodenext.

Full history and upgrade notes: client changelog.

What's Changed

• Harden pipelines, fix ReDoS and Windows, rewrite quick starts by @BuenClima in #2
• Release v0.1.2 with the hook from @nodrail/client 0.1.2 by @BuenClima in #4

Full Changelog: v0.1.1...v0.1.2