0.2.1 — Scoped Guard false-allow fixes / 受限 Guard 误放行修复

Patch release for the scoped Guard false-allow fixes merged in #32, #33, #34, #35, and #36.

Fixed

• files= preserves path casing, compares absolute allowlists with host paths relative to cwd, and accepts Windows drive letters.
• Narrow files= scopes require approval when a tool's mutability or target path is unproven. Explicit files=** remains a wide boundary.
• An explicit empty files= value allows no file writes.
• Dot segments and repeated separators are normalized before scoped-path matching.
• Windows path matching follows case-insensitive platform semantics while POSIX matching remains case-sensitive.

See the matching CHANGELOG.md section for the bilingual release entry.