v0.1.2

Prepare Tali for safer handoffs

Add conservative cleanup and placeholder replacement so agent-authored manifests can manage long-lived logs and fill existing config templates without exposing rendered secrets.

Constraint: Tali must remain a predictable runtime, not a planner.

Rejected: automatic manifest or secret cleanup | manifests and secrets must not be deleted by routine cleanup.

Rejected: sequential replacement of inserted text | replacement should be based on the original file only.

Confidence: high

Scope-risk: moderate

Directive: Keep cleanup preview-first and keep rendered secret-bearing file contents out of logs.

Tested: cargo fmt --check; cargo check --locked; cargo clippy --locked --all-targets -- -D warnings; cargo test --locked --all-targets; release metadata/license/crate-version checks.

Not-tested: full release-check before commit because it requires a clean working tree.