v2.3.0

Minor release: target-repointing switch commands now deny outright instead of asking.

• feat(policy): deny target-repointing switch commands outright by @karlkfi in #25

kubectl config use-context (and its alias config set current-context), kubectx, gcloud config set/unset and mutating gcloud config configurations, az account set, and docker context use previously asked, denying only on a prod-named target. They now deny regardless of the target: the switch repoints the shared ambient target of every parallel session even when aimed at a harmless dev context, and each tool has a per-command pin flag (--context/--project/--subscription) that the deny message names. PROD_GUARD_OVERRIDE still downgrades to a confirmation prompt for a genuinely intended switch. Credential logins, non-repointing config edits, and namespace switches (kubens, oc project) keep the ask.

Full Changelog: v2.2.0...v2.3.0