v0.33.1

Added

• Proxy alerts and MCP redacted reads now explain that well-formed placeholders represent redacted secrets, identify whether the flow is one-way or locally restorable, and reserve corruption warnings for malformed markers or mangled surrounding bytes.
• operatorRedactionNotices provides default-off, metadata-only visibility for every mutation: proxy notices go to stderr, including repeated events under --quiet, while MCP notices go to the configured audit log or stderr when no audit log is configured.