v0.9.1

Remove echo 'lockbox:clean' mechanism. Once locked, a session stays locked — delegate for external actions or start a new session.

• Single approval point (delegate prompt review)
• Removed Bash permission checks from install skill and permissions checker
• Simplified escape skill and docs