v1.0.4

Deprecated — use v0.10.0.

---

Changelog

• 61492a8: fix(config): close credential/host validation gaps across all input sources (@gdameneses)
• 80338ef: feat(security): harden outbound HTTP + OS URL dispatch (@gdameneses)
• 11c768b: fix(output): errors and warnings honor stream + format contract (@gdameneses)
• 3ed62b6: feat(skill,config): safe-write helper + --force on skill install (@gdameneses)
• 7466629: feat(render,skill): client-side auth pre-flight + sandbox docs in SKILL.md (@gdameneses)
• 1cc10b2: docs(surface): document SURFACE.txt's exclusion rule explicitly (@gdameneses)
• cb50674: docs(readme,changelog,npm): v1.0.4 entry + onboarding clarifications (@gdameneses)