AgentRinse 0.8.1

Fixed

• macOS process ownership now bounds target-selected lsof scans and stops
  retrying after the first incomplete scan in an audit pass.

Safety

• Structured lsof output is NUL-delimited, size-capped, and rejected when
  malformed; deadline and output-limit failures kill only the exact child and
  settle without waiting for child exit.

Validation

• Lightweight tag v0.8.1 targets
  f550428b3369eb1825be6fe8e72e45992950ee65.
• Exact-main CI run 32612154668 and CodeQL run 32612154327 passed on that
  commit.