sigillo@0.11.0

1. TTY-aware secret redaction with PTY passthrough — sigillo run now uses pseudo-terminals instead of pipes when stdout/stderr are TTYs. Child processes see isatty()=true, so tools like next dev, cargo, and pytest keep colored output, progress bars, and interactive prompts while secrets are still redacted:

   sigillo run -- next dev
   sigillo run -- cargo build --color=always

   Falls back to pipes automatically when parent streams are not TTYs or on Windows.

2. Git worktree config inheritance — running sigillo inside a git worktree now inherits the project, environment, token, and API URL from the main repo if no worktree-specific config exists:

   cd my-project && sigillo setup
   cd ../my-project-feature-branch
   sigillo secrets   # works without re-running setup

3. Empty and missing secrets in sigillo secrets — the secrets list highlights empty values (empty: true in yellow) and shows a missing: section for secrets present in other environments but not the current one. Non-TTY output stays valid YAML.

4. Empty values allowed in interactive prompt — sigillo secrets set accepts empty values when prompted interactively. Useful for creating placeholder secrets you fill in later via the dashboard.

5. Fixed deadlock on exec failure — sigillo run no longer hangs when the child command does not exist. The errdefer now kills the child before joining reader threads, preventing zombie processes.

6. Fixed PTY fd leaks causing child hangs — PTY file descriptors are now opened with CLOEXEC so backgrounded child subprocesses don't hold the slave fd open, which previously caused the redaction reader to hang forever.

7. Fixed use-after-free in PTY redaction — corrected defer/errdefer ordering so redaction plan memory stays alive while reader threads are running. Fixed double-close of PTY fds by tracking ownership with nullable variables.