v0.9.1

v0.9.1

Fixes agent-profile secret environment bindings for local agent runs.

env is now honored as the environment variable exposed to the child agent:

[secrets.GITHUB_TOKEN]
env = "GH_TOKEN"

This makes the GITHUB_TOKEN secret available to the agent as $GH_TOKEN. The source variable ($GITHUB_TOKEN) is removed from the child environment to prevent it from bypassing the configured binding.

Includes regression coverage and updated agent-profile documentation.