v0.3.0

Added

• SSH tunneling to devcontainers: Run commands in project devcontainer from work-lab
  • wl dc <cmd> works from inside work-lab via SSH tunnel
  • prefix + S in tmux to SSH into devcontainer
  • Zero devcontainer config required (just enable sshd feature)
  • Host orchestrates setup via wl mux/wl shell (lazy initialization)
  • NO Docker socket in work-lab - maintains full isolation
• wl ps shows tunnel status: ⚡ = ready, ~ = sshd detected (run wl mux)
• wl doctor checks for wl alias and suggests setup if missing
• wl doctor detects SSH tunnel configuration in sidecar mode
• New documentation: docs/ssh-tunneling.md
• Integration test script: test/integration/tunnel-test.sh
• openssh-client added to container image

Changed

• wl shell <cmd> now supports running commands directly (not just interactive shell)
• wl dc now runs as proper user (not root) and auto-detects workspace directory
• wl dc from host now auto-configures SSH tunnel for future use inside work-lab
• Container discovery (find_container) checks actual mount paths instead of labels
• README updated with clearer value proposition and sidecar mode examples
• No longer auto-modifies .gitignore (user controls their own files)

Security

• SSH tunneling uses shared filesystem approach instead of Docker socket
• No additional privileges required in work-lab container
• Maintains full isolation from host system