v0.1.1

• Attachment guard at execute time: unsupported attachment types now fail locally and free, before any HTTP request. Works around llm core skipping attachment validation on the Conversation.prompt path (llm -c, llm chat), which forwarded unsupported attachments to the endpoint as a paid 400. Covers the PDF case on vision models too (the endpoint refuses OpenAI file content parts).