sheath 0.2.1

Fixes run_python helpers (load/save without an import) and spill handling for MCP tools loaded under progressive disclosure; adds agent_kwargs on the facade paths. One behavior change: create_agent now refuses shell_executor, file_access_store and background_agents. See CHANGELOG.md for details.