v0.2.31

Added

• Reviewed multi-repository hygiene deployment through dev hygiene manage and
  REPOS, with narrow legacy scanner migration, shared-hook checks and private
  per-repository result ledgers.
• Private rule candidates from existing Tailscale/LAN/Fleet caches, with source
  revalidation and no discovery, connection or credential-store access.
• Selected skill removal through SKILLS and the shared management wizard, with
  explicit agent scopes, ownership/shared-consumer checks and private receipts.

Fixed

• Password detection distinguishes quoted literals and unquoted configuration
  values from program identifiers; scoped fixture exceptions remain explicit.
• Scanner temporary Git repositories use shorter private paths and fixed safe
  failure classifications for native Windows compatibility.
• Scanner version checks reject configurations that older engines can silently
  ignore. Existing artifact finalizers stay separate during migration.