v1.0.30

[v1.0.30]

• Add value-free repo manifest target authoring and review commands through
  hasp project target ... and the hasp template ... alias, so agents can
  request brokered workflows without storing raw secret values in the repo.
• Require local target review before hasp run --target,
  hasp inject --target, hasp write-env --target, MCP target execution, or
  hasp app connect --target can authorize refs or seed runtime profiles.
• Improve project binding diagnostics so hasp doctor, manifest-backed
  secret flows, and hasp secret add --expose distinguish unbound repos from
  bindings that point at missing vault items.