v1.7.2

Patch release: closes two write-guard gaps where read-exempt directories (e.g. ~/.claude/projects/) could be silently written to.

• fix: treat in-place/output flags (sed -i, gawk -i, yq -i, sort -o) as write mode in read-exempt dirs (Q36) by @karlkfi in #93
• fix: guard positional output files of uniq IN OUT / xxd IN OUT in read-exempt dirs (Q37) by @karlkfi in #93

Full Changelog: v1.7.1...v1.7.2