v0.1.9

Runtime secret-safety hardening release.\n\nHighlights:\n- guided setup now writes a runtime .gitignore for .env, state/, and logs/\n- doctor now checks whether runtime .gitignore secret protection is present\n- docs now surface secret-handling guidance earlier and more explicitly\n