v0.20.1

Fixed

• A subagent card opens only once Claude Code allowed the Agent call. The
  mod answered the call above Claude Code's permission check, so a deny or ask
  rule, the permission mode and the user's "no" at the dialog never applied,
  and a refused call could still open a lich session that ran the task. It now
  passes the call on to that check and opens the worker at agent.spawn,
  which only an allowed call reaches (#74).