v0.2.1

Review pass before wider sharing:

• revoke and audit now resolve the wallet mm has selected (selectedWallet in the local snapshot) instead of the first known wallet — matters as soon as an account has several wallets.
• Token symbol() is sanitised (control characters and terminal escape sequences stripped, 24 chars max) and decimals() clamped, so a hostile token cannot inject text into the terminal or an agent's context.
• Spender labels are chain-aware: deterministic deployments on every chain, others only where that address is known (adds Base routers).
• unlimited now means exactly ≥ 2^255 (was 2^255 − 1).
• scanned.skippedNonErc20 counts pairs whose contract does not answer allowance().
• 21 unit tests (vitest) covering parsing, sanitisation, thresholds, labels and wallet resolution; CI runs them before the build.