v0.1.1 — injector & runtime hardening

Fixes four issues found in a cross-model review:

• Banner uses printf and folds newlines: a double-quoted step name decodes "a\nb" to a real newline, which used to break out of the run: | block and corrupt the injected YAML. A leading -e/-n or a \c in the name would also be eaten by echo.
• In-container test/rm output is captured: a workflow that swapped those binaries can no longer write ANSI escape sequences straight to your terminal while actbreak polls.
• Job matching is token-aware: a job named test no longer matches the latest matrix suffix, and a no longer matches every container.

72 tests, real docker+act path exercised in CI.