0.18.0

Base branch check: Focus says when origin's default branch (else
origin/main) has commits this branch lacks. When those commits changed
files edited in the session, the item turns red and names them; i
drafts a prompt to show those changes, rebase and rerun the checks.
It checks every gitPollMinutes (default 5, 0 is off) and after each turn.
By default it compares against your last fetch; gitFetch fetches the base
branch first (never with CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC set,
never asking for credentials).

Also: secrets in camelCase or prefixed names (accessToken, PGPASSWORD)
are masked, quoted values with spaces included; a turn any Stop hook
sent back stays the same turn for the done gate.