v0.3.0

Features

• add lazy secret resolution to locksmith mcp run - the vault is
  touched on the first MCP request rather than at startup, in both
  local (stdio-shim) and proxy (templated headers deferred until
  401/403) modes; the daemon session is transparently refreshed if
  it expires between startup and the first fetch (see
  docs/architecture.md and docs/configuration.md)

Fixes

• locksmith init no longer offers 1password or gnome-keyring
  as selectable vault backends - they appear as "Planned (not yet
  supported)" and auto-mode skips them even when op/secret-tool
  are in $PATH