v0.11.2

Fix false positive in permissions checker: generic Bash or Bash(*) in allow no longer triggers CRITICAL warning when a more specific Bash(*lockbox-prompt*) in ask overrides it. Models Claude Code's specificity-based precedence correctly.