v0.5.1

[0.5.1] - 2026-03-29

Changed

• use OIDC trusted publishing for npm
• update deny.toml RSA advisory comment to reflect actual ssh-rsa usage
• bump to v0.5.1

Fixed

• fix scoped-only secret persistence, import overwrite, export --json escaping, merge driver stale meta, info spec divergences, vault-aware key resolution; add skeleton command and AI agent safety guide
• fix diff ignoring scoped values, reorder MAC check before decryption, fix revoke exposed keys overstatement
• fix merge driver stale-meta check bypassing conflict detection
• fix diff missing scoped overrides, reject symlink lock files, document ssh-rsa advisory

Other

• consolidate fmt, clippy, deny into single lint job