v0.1.3

Changes

• Harden examples/codex-workers: clean up spawned process groups on all exits, narrow Codex credential exposure through a scratch CODEX_HOME, and document the remaining host-execution risk.
• Bound Codex SSE parsing with line, frame, and accumulated output limits, with regression coverage.
• Clarify mailbox ownership semantics for buffered mailboxes and make Corpus multi-writer merge requirements explicit as associative, commutative, and idempotent.
• Add offline GitHub Actions CI gates for test, build, vet, and plugin scaffold sync.
• Make make test uncached under the race detector and make make test-integration-ci race-enabled and uncached.
• Bump the HandoffKit plugin manifest to 0.1.3 and sync scaffold references.

Verification

• make test
• make build
• make vet
• make check-plugin-sync
• make test-integration with credentials cleared, confirming skip behavior
• make test-integration-ci with credentials cleared, confirming it fails when no live backend is configured
• git diff --check