v0.2.21

What's Changed

• feat(secure-exec): add createVm, host function globals, docs, and sidecar-owned permission defaults by @NathanFlurry in #1987
• test: prove guest listeners stay VM-local by @NathanFlurry in #1998
• fix: deny default provider egress by @NathanFlurry in #1997
• fix: allow VM-local networking by default by @NathanFlurry in #1999
• fix: keep all guest listeners VM-local by @NathanFlurry in #2001
• docs: define default VM isolation boundary by @NathanFlurry in #2002
• fix: separate runtime bootstrap from guest subprocess policy by @NathanFlurry in #2000
• refactor(agentos): rename bindings to host functions by @NathanFlurry in #1996
• docs(secure-exec): finish the host functions rename by @NathanFlurry in #2003
• refactor(agentos): drop the host function wrappers, names, and descriptions by @NathanFlurry in #2006
• fix: restore clippy and rustfmt on main, restructure secure-exec docs by @NathanFlurry in #2004

Full Changelog: v0.2.20...v0.2.21