v0.19.0

Changelog

• 115f004 Merge pull request #78 from assesvgs/master
• bf17a18 Merge pull request #81 from EnRaiha/fix/long-term-args
• d3f95cf Merge pull request #84 from edouard-claude/fix/uv-subcommand-scope
• fab371a Merge pull request #86 from edouard-claude/fix/docker-run-empty-output-85
• 2a222e2 Merge pull request #89 from edouard-claude/fix/hook-allow-only-attestable-88
• fe7f82f fix: add empty/root guard to HasAnyFilter + clarify path comment
• 239e9a7 fix: docker-build no longer swallows docker run output (closes #85)
• 2b068a9 fix: git-log filter no longer overrides user commit-count flags (closes #79)
• 1937ce8 fix: guard empty and root paths in filepath.Base normalization
• 1ffc625 fix: only auto-allow hook rewrites when every command segment is attested (closes #88)
• 11f6f0f fix: path prefix normalization + inject defaults before user args
• 965bd16 fix: scope uv-sync to subcommand and add uv lock/add/remove filters (closes #83)
• 1204a92 fix: 绕过 Android 内核不支持的 faccessat2 系统调用
• 07b8593 refactor(engine): split lookPath by platform, preserve Windows PATHEXT