v0.158.77

• Say less at launch: a tier's guard says chase rather than agent-, naming the tier only in a refusal, so a mounted checkout is chase: mounting DIR (TIER, MODE); the line beside an approval says where the project's Docker is without its ports, which the approval shows, and without the workspace, the checkout launched from; an app with no credential says nothing of where it came from, and one with a credential says which secret without the workspace; and the shell's own Docker banner goes, as it said the approval's line again (7a96d72)