v1.3.0

Minor release: the destructive-gh-delete guard now covers a much wider set of subcommands.

• feat: ask before destructive gh deletes (branch / repo / label) by @karlkfi in #18
• feat: ask before more destructive gh deletes (release/secret/variable/gist/cache, workflow disable, release delete-asset, api repo delete) by @karlkfi in #19
• test: isolate per-run tmp dir to fix harness flakiness by @karlkfi in #20

Full Changelog: v1.2.0...v1.3.0