v0.4.2

Added

• Auto-discovery of local model servers on the Custom (OpenAI-compatible) path. Ollama, LM Studio, llama.cpp, and vLLM running on conventional ports are detected and offered as model options during setup.
• Validation timeouts on provider auth checks: 15 seconds for Anthropic, OpenAI, DeepSeek, and Custom providers, preventing indefinite hangs on slow networks or unreachable endpoints.
• .github/secret_scanning.yml configuration for repo-level secret scanning policy.

Changed

• Hidden-input paste hardening for API key entry: pasted keys no longer leak partial echoes during the masked-input phase.
• Slash-command submit-time prefix matching: typing /m and pressing Enter resolves to /model rather than rejecting the partial command.

Removed

• Mistral provider option removed entirely.
• Anthropic Haiku 4.5 removed from the model menu (low confidence in Haiku-tier sessions for Aegis discovery work).
• Model menu reduced from 11 options to 9.