v0.9.1 - Codex managed home allowlist

Highlights

• Hardened Codex agent_done managed CODEX_HOME.
• The managed Codex home now only links auth.json, copies config.toml, and writes aiterm-owned hooks.json.
• Other normal ~/.codex entries such as state/cache/session files are no longer symlinked into the managed home.
• This keeps normal Codex hook files untouched while reducing write-through side effects from the managed launch environment.

Verification

• Tag/package verification: local npm test at the release commit passed 167/167.
• npm pack --dry-run --json: passed.
• npm publish --dry-run --access public: passed.
• GitHub Actions CI for tag v0.9.1: Linux, macOS, Windows, and npm publish passed.
• npm published as aiterm-mcp@0.9.1; npm latest points to 0.9.1.
• Post-release finalization on main: server.json was synced to 0.9.1, a release metadata version-sync test was added, and npm test now passes 168/168.
• Official MCP Registry published io.github.kitepon-rgb/aiterm-mcp version 0.9.1 as latest.
• Global install smoke passed for /opt/homebrew/bin/aiterm-mcp: initialize returned 0.9.1 and tools/list returned all 9 tools.