v1.18.0

Closes #170
Closes #176
Closes #178
Closes #179
Closes #180
Closes #181
Closes #182
Closes #183
Closes #184

Multi-environment workflows: each environment now keeps its own session, any command can target a non-active environment with --config <name>, and routine run --quiet prints only what the routine prints. Also fixes several flags that were silently swallowed or misread, two of which sent real requests when you asked for a preview.

✨ Features

• Per-environment sessions (#186). Sessions are cached per environment in sessions/<env>.json, bound to that environment's URL and user, so config switch no longer logs you out and a session is never sent to another host. Adds config clear-session [name] [--all].
• Global --config <name> (#190). Runs one command, a whole routine, or mcp against any configured environment without changing the active one: mycli --config staging pets list. Also available as runRoutine(name, { config }) and CliOptions.environment.
• routine run -s/--quiet (#177). Prints only what the routine's commands print. Failures still go to stderr with a non-zero exit.

🐛 Fixes

• routine run --dry-run previews again (#177). The program-level --dry-run was swallowing the flag, so the routine actually ran.
• Attached -ocurl / -oroutine-step now preview (#188). The attached form sent the real request.
• Leading program flags (#185, #190). mycli --quiet <cmd>, --table and -o json … no longer open the setup wizard, break aliases or skip custom help, and neither does mycli help <cmd>.
• Cross-environment credential leak (#186). In project mode, config switch cleared the wrong session file, so one environment's credentials could be sent to another host.

⚠ Changed

• Log in once per environment after upgrading (#186). The old session.json is ignored and safe to delete. Sessions live in a self-ignoring .apijack/sessions/. Saving credentials clears that environment's session. CLI routine run reuses the cached session, while programmatic runRoutine still starts fresh. Consumers that deep-import SessionManager or read session.json directly should update.
• Alias keys starting with - are rejected at startup (#185).
• The last -o wins and -o=<v> works (#188). These match Commander. A preview -o hidden in combined short flags now errors instead of sending.

🧹 Internal

• Hardened the review and merge crons: stranded-label recovery, no waiting on CI, a 25m review timeout, merge-first and no-loop final-review (#187, #189). Docs sync (#173, #191).

---

Shipped via scripts/ship.sh.