v0.14.0 — injection defense at every LLM boundary, PreCompact snapshots, --debug

• Prompt-injection defense: every LLM prompt that consumes a
  transcript, the handoff preamble, and the brief injection wrapper
  now explicitly frame session content as data, not instructions —
  pinned by tests. (Prompts changed → the chunk cache version bumped
  and brief notes re-distill once on next refresh.)
• PreCompact hooks: --install-hook and --install-brief-hook
  also register PreCompact — a handoff snapshot before compaction
  squeezes detail away, and a free brief-skeleton refresh
  mid-session.
• Session paths in messages are now ~-collapsed; the README opens
  with a 5-second vhs demo (docs/assets/demo.tape regenerates it).
• Tolerant, not mute: hooks now report swallowed errors on stderr
  (still exit 0, stdout untouched); --grep says how many unreadable
  files it skipped; new --debug flag / CLAUDE_HANDOFF_DEBUG=1
  surfaces tolerated failures (corrupt JSONL lines) with file and
  line number.