pakka v0.11.0

Eight PRs since v0.10.0. Added: performance reviewer agent — fourth parallel review lens with 3 perf eval seeds (#16); claude-code OAuth A/B bench harness via claude -p with a PAKKA_DISABLED kill-switch and zero API-key dependency (#13); guard learned per-repo allowlist (.pakka/guard-allowlist.json) with override-count decay, secret categories never allowlistable (#12); semantic rewriter injection gate with strict fallback and audit on rejection (#15). Changed: guard hook matcher widened Read|Bash to Read|Write|Edit|MultiEdit|Bash — secret-write protection is now active; RECEIPTS output-tokens figure re-based to ~1,019,833 cumulative — the previously published 5,939,566 summed repo-wide snapshots and overcounted; corrected measurement, not a regression (#10). Fixed: [skip pakka] honored on AST reject paths (#8); skill-check requires directive intent, bounded ~1ms scan (#11); canonical repo_root attribution with historical backfill retag (#10); pricing entries for claude-fable-5, claude-mythos-5, claude-opus-4-8 plus dated-ID prefix fallback (#25).