v0.1.0

Added

• ShipPilot simulator MCP bridge with a small allowlist of simulator-only tools.
• Explicit MCP input schemas for UI automation tools.
• Trusted-runner checks for secret-backed GitHub Actions runs.
• Stronger secret redaction, including transformed secret values.

Changed

• Default Codex tools and web search are disabled during QA execution.
• QA prompts and security docs now treat QA case text, app UI, screenshots, logs, and files as untrusted data.
• Already-booted simulators are handled as a recoverable setup condition.
• Package bin path is normalized.