0.8.1

Fixed

• Harden sidecar temp and token-cache permissions: mip-decrypt tightens
  passthrough and decrypted outputs to owner-only, the example auth helper
  creates its token cache atomically at 0600, and the README documents
  storage cleanup. No parsing or detection behavior change.