v1.0.4

Fixed

• A bridge timeout is now reported as timeout rather than being indistinguishable
  from a client-side cancellation. The two share an exit status but mean opposite
  things — one is worth retrying after a cold start, the other means the caller has
  already gone away. Timeouts are classified timeout and are not retried.
• use_proxy is sent to the daemon as null when unset instead of false. The
  daemon reads the three states differently — unset lets it decide (WARP auto-retry
  included), false forces the proxy off — so the old value silently disabled the
  daemon's own fallback. The tool and JSON-schema descriptions now state the
  tri-state explicitly.
• A missing ssh binary no longer crashes the bridge with an uncaught ENOENT.
  Both spawn sites route through one sshRun() helper whose error handler prints
  a message and exits 1; sshAvailable also requires a clean status === 0 result,
  so a non-zero exit no longer counts as "available".
• ci.yml: the gitleaks job gets GITHUB_TOKEN. Without it the check fails on
  every pull_request event while still passing on pushes to main, so a red PR
  said nothing about its own diff.

Changed

• Upstream retry backoff starts at 1 s instead of 3 s, capped at 8 s, so a cold
  start is not penalised by a fixed 3 s wait before the first retry.