v0.20.2

(0.20.2: the hooks run again on macOS's Python 3.9.) Follow, steer and take over a worker; and a secret-guard fix.

• Follow: a running or ended worker opens as a read-only conversation (Tasks, Inbox, Flow; #/chats/worker/<project>/<ID>). Output is sent only while someone follows it, masked, capped; the last events are kept when it ends.
• Steer: send a message to a running worker; it arrives after its next tool call and the worker carries on in its own session, worktree and permissions.
• Take over: stop the worker and continue its own session as an ordinary chat.
• Tasks: start, follow, stop and assign a task (to another agent or person, optionally pinned to one pc) from the Tasks list; the Machines list no longer starts workers.
• Secret guard: a known secret in a URL query, after & or before a literal \n is refused.
• Usage limits of Codex/agy stay visible between sessions until their window resets; a worker whose exit is unknown after a companion restart is judged by its outcome.

Image: ghcr.io/to0wnn/knowledge:0.20.2