v0.3.2

v0.3.2: un-phantomable wizard consent + visible block previews

Merge rc-v0.3.2 (field-tested by the reporting user on Apple Terminal:
wizard waits, blocks visible, typed gates hold).

On Apple Terminal, the wizard's ~20 sequential huh/bubbletea programs leaked
terminal capability-query replies into each other's stdin as phantom keys
(DECRPM replies end in $y — huh's Accept key), auto-answering everything
including repairs and the final write gate. Defense in depth: write and drop
consent moved OUT of the TUI to typed plain-line "yes" gates preceded by a
termios kernel input-queue flush (TIOCFLUSH darwin / TCFLSH linux) + bufio
discard; exactly ONE bubbletea program per wizard pass (per-block, secret,
starter, and repair groups in a single multi-group form). Per-block and
secret-routing screens now preview the MASKED block content (12 lines,
100-rune clip) with titles skipping banner-divider comments; zsh Describe
clips by runes. Real-pty tests pin the field repro inverted.

Two-model reviewed across three rounds (the first drain attempt was proven
inert on real ttys and replaced). 279 eval assertions + conformance green;
113 unit funcs incl. real-pty and -race; cross-compile 4/4. bin/ kept at
main's pinned state; release CI rebuilds and pins.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>