v1.8.0

Added

• Add [ai] binding support and wdl ai commands for namespace-scoped
  providers, credentials, and model discovery, including an offline provider
  JSON initializer.
• Add OpenAI-compatible SDK guidance and a bearer-protected Responses
  function-tool agent example.

Changed

• wdl ai, wdl secret, and wdl token reject flag-before-subcommand calls
  whose option value is also a command word; put the subcommand first or use
  --flag=value.

Security

• Redact invalid argument details for wdl ai, wdl secret, and wdl token so
  accidentally supplied credentials are not echoed to terminal or CI logs.