AgentRinse 0.8.0

Added

• Added explicit multi-repository cleanup campaigns with
  clean --profile fleet --repo <root>... --max-risk safe|recoverable,
  deterministic Git common-directory deduplication, and fleet-specific action,
  quarantine-byte, blocker, unknown-state, and diagnostic summaries.

Safety

• Git worktree reachability now uses bounded upstream, remote, and configured
  pin checks instead of enumerating every containing ref. Current-worktree
  protection is exact for worktrees and subtree-scoped for artifacts, ignored
  content has its own hard blocker, failed fleet repositories remain isolated,
  and empty applies create no lock or journal.
• Private state directories are now preflighted as a complete batch before any
  permission repair, with one verified Windows ACL update for the full batch.

Validation

• Lightweight tag v0.8.0 resolves to
  54c903ff59f111e136318d8d6dc19196745702e7.
• Exact-main CI run 32495608716 and CodeQL run 32495607994 passed on that
  commit.
• Validation-only Release run 32495940859 passed the validate job, including
  source/package checks, version matching, checksum verification, and packaged
  CLI smoke tests.
• Publish-only package, npm, and release-asset jobs were skipped.