v0.1.1

Security hardening from the Hermes catalog review (#4): sender allowlist by default (--allow-all to open the gate), attachment paths confined to ~/.hermes/media and ~/.hermes/output, minted inbox-key tokens written to a 0600 file instead of returned to the model, @openmail/cli pinned to 0.7.2, openmail feedback user-confirmed.