v0.2.1

Auto-approve Basalt MCP tools via default_tools_approval_mode

Non-interactive runs cannot answer MCP approval prompts: every Basalt
tool call resolved as 'user cancelled'. Approve tools on the basalt
server only; writes stay speculative until Basalt review. Bump 0.2.1.