v0.9.24

Patch release — auth-path, URL-handling, and git-status parsing fixes (since v0.9.23, #196–#206).

Auth & config

• config: preserve the URL path when selecting the queue auth header, so a reverse-proxy's /aelli and /litellm mounts stay distinct (#196)
• config: sanitize CR/LF/TAB from auth header values (header-injection guard); treat default-port-equivalent gateway URLs as equal; strip IPv6 brackets in isLocalhost; reject non-numeric A2A port env (#204)
• daemon: reject non-string cwd before forwarding to the A2A server (#202)

git status parsing

• git-context: UTF-8-encode raw chars in quoted paths so non-ASCII filenames round-trip under core.quotePath=false (#205)
• git-context: count backslashes before toggling rename quotes so a path ending in a literal backslash splits to the correct destination (#206)
• git-context: add the missing \a (BEL) C-escape in unquoteGitPath

Plus Nemotron review-cycle hardening across validation, daemon, task-queue-client, and policy.

Update with /plugin update in Claude Code.