v1.8.1

Changed

• Require Wrangler v4 and validate Workflow page limits locally as integers in
  1..1000.
• Document R2 --out overwrite/symlink behavior and include token-store tasks
  in deploy-skill discovery.

Fixed

• Keep wdl config explain useful when an attempted token-store read fails.
• Fix the opt-in Windows npx fallback and reject stable release tags with no
  matching changelog section before publishing.

Security

• Require confirmation for wdl delete version and reject its unsupported
  --dry-run flag, and cap assembled Tail SSE event data at 4 MiB.
• Reject unsafe token-store files and POSIX ownership/permission states using a
  descriptor-validated read path.
• Reject Control URLs containing credentials, query strings, or fragments; treat
  .local as network/mDNS rather than loopback for plaintext-token warnings;
  and recognize the full 127.0.0.0/8 range.
• Pin official GitHub Actions to fixed commit SHAs.