v1.0.1

Critical Fixes

• _basic_yaml_load() now preserves nested configs (was silently
  destroying existing Hermes settings)
• Config saved incrementally after config mutations for crash safety
• Automatic rollback on migration failure restores pre-migration state
• Windows: proper process detachment with CREATE_NEW_PROCESS_GROUP
• Fixed Hermes installer URL to official NousResearch/hermes-agent repo

New Features

• --force flag to re-run migration (skips idempotency check)
• --quiet/-q flag to suppress non-error output for CI/scripting
• Unknown channels now warn instead of being silently ignored
• Post-migration prompt to uninstall hermes-migrate and clean up

Security

• Added Stripe (sk_live_, rk_live_), Twilio (AC..., SK...), and Bearer
  token redaction patterns
• Added AWS, GitHub, and Anthropic key redaction
• Expanded SAFE_FIELD_ALLOWLIST to prevent false positives on
  token-like config fields

Code Quality

• Fixed all ruff lint issues (unused imports, f-strings, import
  sorting, line length)
• Black formatting compatible with Python 3.9+
• 130 tests (up from 107) covering YAML loader, rollback, idempotency,
  run(), quiet mode, EOFError handling, and all new redaction patterns

Full Changelog:
v1.0.0...v1.0.1