v0.8.1

• Fix the release smoke test to read errors from the diagnostic stream: it still captured only stdout, so after v0.8.0 split results from diagnostics it failed the platform binary build and left v0.8.0 published without downloadable artifacts
• Restore the smoke test's secret-leak assertion, which had been passing against an empty string and so verified nothing; it now checks that a configured secret appears on neither stdout nor stderr
• Assert stream redirection against the stream that carries the event: --stderr-file receives a runtime error under the default split, and --output-to stdout moves that same error into --stdout-file
• Run the release smoke as part of the project test gate instead of only inside the Release workflow, so a check that can fail a release fails the gate first