Hush v0.0.2

Fixes three issues found during the repository review:

• Reject C1 Unicode control characters in names at the service boundary, matching CLI validation and preventing one invalid Profile name from breaking unrelated CLI executions.
• Clear revealed plaintext when the vault snapshot changes, including after edits and refreshes. Discard reveals that finish against an outdated snapshot.
• Audit raw reads of the vault, secrets, and devices database tables before returning ciphertext or wrapped keys. Audit records contain the table name, never row contents.

Includes regression tests, browser tests in release CI, and CI coverage for the master branch.

Also includes the standalone Bash installer, Hush agent skill, and documentation improvements added since v0.0.1. Download the appropriate archive below and verify it against SHA256SUMS, or use the installer documented in the README.

Service and Web fixes require redeploying the application from this release; replacing the CLI binary alone does not update the hosted service.