0.3.0

Changed — may break callers

• The skeleton runs on cli-core 0.439.0; cli-base stays at 0.59.0. A run record now keeps the command line as
  typed, so runs show tells what was run; a secret is still [redacted]. The new setting record_input
  (config set record_input false) brings back the masking of every typed word. config set and config unset list
  record_input, so a CLI's help snapshot changes once. A test or page of a CLI that says a run never holds what was
  typed needs updating. An argument or option that carries a secret is marked with secretInput() from
  @wirecat/cli-core/cli; the skeleton has none to mark.

Security

• A first word refused as a profile no longer reaches the run record as the run's profile, and an error that
  quotes --token=… or password=… no longer keeps the value (from cli-core 0.438.0 and 0.439.0).

Fixed

• docs/dev/reference-clis.md links the evidence for what it says about other repositories, no longer calls
  whatsapp-cli the handbook's worked example, points a mail CLI at cli-memo's mail import, and no longer says config
  hides messenger settings when messenger is false.
• pnpm release:check also runs security:no-leak and package:check, which only bin/release --local ran.
  package.json is copied once, so a CLI adds both to its own release:check by hand.
• SECURITY.md asks never to send a session beside a token, a password and private content.