v0.2.1

Auto-approve Basalt MCP tools via default_tools_approval_mode

Non-interactive runs cannot answer MCP approval prompts: every Basalt
tool call resolved as 'user cancelled'. Approve tools on the basalt
server only; writes stay speculative until Basalt review. Bump 0.2.1.

v0.2.0

Build against SDK main: use SDK launch types, SessionEnded error field

v0.1.0

Initial release: OpenAI Codex CLI agent launcher plugin for Basalt