Recall 0.3.2

Security

Closed a path-confinement bypass in output_dir: a pre-planted symlink at the default .recall (e.g. shipped in an untrusted clone) could redirect Recall's writes outside the project, because the fallback re-resolved the same symlink
and returned the escaping path. The fallback is now validated too — when no in-project location is safe, Recall refuses to write (output_dir returns None) rather than landing outside the tree. Added regression tests covering the
symlinked-.recall case end to end.

Full changelog: https://github.com/raiyanyahya/recall/blob/master/CHANGELOG.md