v0.3.2

What's new

• opencode support — token-goat install --opencode drops a TypeScript bridge plugin into opencode's plugins directory. Image shrinking, post-edit indexing, and compact assist work.
• openclaw support — token-goat install --openclaw drops a TypeScript bridge plugin into ~/.openclaw/plugins/ and registers it in openclaw.json. Image shrinking, post-edit indexing, and pre-fetch denial work.
• Security hardening: settings.json type validation, project marker resolution, stdin/file payload caps, session symbol coercion, Drive download limit.
• Performance: hot-path improvements in embeddings, parser, session, image_shrink, hooks, and db.
• Observability: session timing, embed search metrics, install step logging, db slow-open warning, compact and gdrive metrics.
• Type safety: replaced broad Any annotations with concrete types across repomap, worker, stats, and stats_renderer.
• 150+ new tests covering repomap, compact, hints, bridges, session, webfetch, gdrive OAuth, and language adapters.