v0.5.10 — EGRESS.md, enforced by a test

[dea6cat]

• EGRESS.md: every way Clyde can use the network, what it sends, when, and how to turn it off. A test fails whenever the code names a host the document does not, and when the document promises an off switch the code never reads.
• WebSearch now asks before each search, showing the whole query, the way WebFetch asks before each URL — whatever the model wrote goes to DuckDuckGo, and a key or a snippet of your code can ride in it. In headless clyde -p, a search is denied unless an allow rule exists or you pass --mode all_in.
• LM Studio's installer is no longer downloaded and run on Clyde's own when the headless daemon is missing. The terminal asks first (default No); where nobody can be asked, it stops with the command to run by hand.
• CLYDE_SKILL_SCAN=closed holds back any skill, plugin, agent or MCP server whose SkillSpector scan failed. The default is unchanged — a failed scan still loads, so a broken scanner never locks anyone out — but it is no longer silent.
• Edit now says when a match was loose (it ignored trailing whitespace or indentation): the result tells the model to check the patch, the summary shows matched loosely, and the trace records an edit_loose_match event.
• GOVERNANCE.md (how decisions and releases happen, how to become a maintainer), SECURITY.md (report privately, what counts, the known limits), and a PR template.
• Fixed: a failed scan of an MCP server's tool list is no longer cached as a verdict — one scanner hiccup no longer sticks until the tool list changes.

---

This discussion was created from the release v0.5.10 — EGRESS.md, enforced by a test.