v0.14.0

A major refactor of the language and dropping Docker sandboxing to remain clear focus.

• Language: def and run replace workflow / rule / ensure. Names are private unless export. jaiph run needs export def main.
• Runtime: No first-party Docker sandbox. Runs execute on the host. Isolate with your own container or CI runner (Deploy jaiph).
• Scripts: Sterile env. A script sees process basics, JAIPH_* contract keys, and host keys listed in use and granted with --env. Host presence alone is not a grant.
• Prompts: Named, reusable prompt name(params) [use KEY] = "…". A def may declare a local script, def, prompt, or const.
• Channels: send payload -> channel. The old channel <- payload form is gone.
• CLI: --env KEY names a missing host value and how to pass it. use / --env cannot name the audit-chain key or journal path.
• Editors: VS Code, Zed, and the docs highlighter cover use, import script, and named prompts.