v0.1.23 — Pre-allow vault root and thread cwd as additional directories

Passes the vault root and thread's working directory as additionalDirectories to every session, so Claude can read/write within those trees without hitting permission prompts or the internal ZodError that was occurring when a granted permission path wasn't in Claude's allowed-directory list.