v0.6.0

What's new

• Configurable masking denylist — force-mask specific literal or regex patterns with a chosen placeholder type, even when the detector misses them or PII detection is disabled. Implements the Exclude List request (#59).
• Regex whitelist — whitelist entries now support regex: true; a regex entry must match the entire detected value.

Fixes

• Streaming unmask now restores a placeholder whose [[/]] delimiter is split across SSE chunks, instead of leaking the raw placeholder to the client.