Symlink-safe filesystem operations, proxy/credential handling hardening,
scanner and placeholder fixes, process/env hygiene, CLI validation, audit
log sanitization, and CI/release pinning. See CHANGELOG.md.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>