2.0.2

fix(sandbox): scope write-guard to admin + admin-API surfaces only

The Layer A DB::beforeExecuting hook is global, so it also fired on the
storefront: a product page write (view counter) was blocked whenever an
admin was logged in the same browser, rendering a full-page 403 on
/product/*.html.

isActive() now also requires isAdminSurface(request()): the request path
starts with an admin/API prefix (admin_surface_prefixes + GP247_ADMIN_PREFIX

• vendor/pmo when installed), or a Livewire update whose Referer host page is
  admin. Storefront, console and queue are never enforced.

• config.php: add admin_surface_prefixes (gp247_admin, api).
• readme: note admin/API-only scope; version 2.0.2.

Co-Authored-By: Claude Opus 4.8 noreply@anthropic.com