v1.2.0

Minor release: host-wide temp (/tmp) paths now deny by default and steer to a repo-local scratch dir, configurable via env vars.

• feat: deny host-wide temp (/tmp) paths, steer to repo-local scratch by @karlkfi in #55

Plus internal agent-guidance updates (#54).

Full Changelog: v1.1.0...v1.2.0