3.3.0

What's Changed

• Security: bound IPA Info.plist expansion and review-response batch fan-out by @rudrankriyam in #1826
• Security: redact credentials at output/error boundaries and isolate helper environments by @rudrankriyam in #1827
• Security: harden repository-controlled file I/O against path traversal and symlink escapes by @rudrankriyam in #1830
• Security: harden workflow examples, interpreted output, and install-skills dependencies by @rudrankriyam in #1829
• Security: harden privileged mutations with exact target binding and explicit confirmation (breaking: file-driven batch mutations now require --confirm) by @rudrankriyam in #1828
• fix(security): close post-merge release blockers by @rudrankriyam in #1832
• fix(security): close release regression gaps by @rudrankriyam in #1833

Full Changelog: 3.2.0...3.3.0