v0.4.0

Changed

• Error messages updated: Config rule denials now say "(config rule, bypassable)" instead of referencing the removed doit --retry CLI flag
• agents-guide.md rewritten: Now documents MCP tools (doit_execute, doit_dry_run, etc.) instead of the legacy CLI interface
• README.md rewritten: Documents MCP server architecture, claude mcp add quick start, MCP tool reference, and elicitation-based policy decisions

Removed

• All references to legacy CLI syntax (pipelines, unicode operators, --retry, --list, --audit subcommands) from user-facing documentation