v0.1.77

What's new

• Added first-class sensitive ignore candidates to sensitive-audit JSON output.
• Added --format ignore --ignore-target agentignore|codexignore|aiexclude|gitignore for reviewable generated ignore files such as .codexignore.generated.
• Kept the audit read-only and filename/path-only: it does not read file contents, follow symlink targets, or mutate repositories.
• Updated README, discovery docs, OpenAI OSS brief, schemas, and tests for the new exclusion workflow.

Verification

• npm test
• npm run check
• git diff --check
• npm pack --dry-run --json
• Local CLI smoke for generated .codexignore candidates