herdlet 0.9.0

• spawn starts codex workers (--agent codex), reads rollout transcripts, and knows the codex usage-limit wording. New --allow pre-seeds the worker allowlist, and an approval policy per spawn.
• send serializes submissions per pane, waits for the input box to clear, verifies the submit, and --ack reports back. It refuses to type on a menu (exit 6) or over a draft that does not clear (exit 4). --no-enter implies --no-verify.
• approve --choice <text> picks the menu option by meaning, not by digit, and marks the worker working only while the record still shows blocked (compare-and-set on state and timestamp).
• Right-stack pane layout for spawned workers; ack --kill-pane closes only stale panes (a live worker behind a shell wrapper survives; --force overrides); compact events.

Restart the daemon after upgrading: pkill -f 'herdlet.*serve', then any herdlet command.