v0.3.0

• audit: heuristic static scan of out-of-tree plugins for sensitive
  touchpoints — network egress, subprocess/shell, filesystem, environment
  variables, dynamic evaluation. Kernel @deepseek-ai/* bundles are the
  trusted baseline and are not scanned.
• cost: estimated context-token footprint per model-facing tool schema,
  sorted with shares.
• shadow: services claimed by more than one plugin (legal under isolation
  scopes, and invisible without this), plus per-plugin registration counts.
  Exits 1 when a multi-provider service exists.
• xray_composition gains cost and shadow views; summary now includes
  toolSchemaTokens.