v1.2.1

Fixed

• Select the current authentication config family before considering legacy compatibility configuration, so stale credentials cannot override the active login.
• Make /multica doctor verify the selected token through /api/me and distinguish ready, invalid, unavailable, and missing states.
• Redact configuration-read and unexpected diagnostic failures so user-visible Hook output never exposes local paths, credentials, or raw stderr.

Verification

• CI passed on the release pull request.
• ./scripts/test.sh: 46/46 tests passed.
• ./scripts/smoke-install.sh .: isolated Codex plugin installation passed for version 1.2.1.
• Independent QA review: approved.