v0.92.0

Changelog

• d73a6e4: Revert "fix(bash): decide auto-approval from the parsed command, not its prefix" (@joestump)
• 877c539: feat: establish Crux as an independent coding harness (@example-git)
• 1fdb081: fix(bash): decide auto-approval from the parsed command, not its prefix (@joestump-agent)
• 059ba81: fix(bash): keep read-only git filter and remote forms auto-approved (@joestump-agent)
• 07e0544: fix(bash): satisfy staticcheck QF1001 in isAssignment (@joestump-agent)
• ed15da4: fix(ui): use dialog background for bash syntax highlighting in permissions (charmbracelet#3575) (@andreynering)
• 8dd773b: fix: harden filesystem access and cross-platform validation (@example-git)
• d77c80f: fix: tighten filesystem and local server security (@example-git)
• 945c518: sec(bash): close four auto-approval gaps in the safe-command matcher (@joestump)