v1.0.1 — fixes for unattended scheduling

Two fixes found in production on a systemd-timer deployment, verified end-to-end:

• Auth in clean environments: schedulers (systemd/launchd/cron) do not inherit interactive-session credentials. auto-trim.sh now sources ~/.config/codex-memory-trim/env (one line CODEX_API_KEY=..., chmod 600) automatically.
• Sandbox read-only CODEX_HOME: codex exec default workspace-write sandbox marks ~/.codex read-only, which made the mandatory pre-run backup fail every time. The runner now passes --sandbox danger-full-access; safety rails remain in the skill itself (backup-first guard, deletion criteria, git rollback).

Also documents both requirements in the README (EN/中文). Full changelog: v1.0.0...v1.0.1

v1.0.0 — first public release

Three sub-skills for Codex global memory maintenance:

• trim: usage-based three-layer pruning (summary + raw + sqlite row, git-baseline committed)
• compress: rewrite verbose memory entries into concise form
• add-global: add custom global rules via ad-hoc notes with immediate propagation

Includes a read-only audit script (collect.py), an install/update/schedule installer (systemd timer on Linux, launchd on macOS, cron fallback), dark-style logo and concept art, and bilingual README (EN/中文).