v0.2.0

Changelog

• af5fb3a: docs: put keywords in the README H1 (#9) (@nabsha)
• 7f9e2df: docs: stop claiming an agent never sees a secret's value (#12) (@nabsha)
• d1f92e4: docs: stop the README hardcoding a version (#8) (@nabsha)
• 4ac7205: feat: publish an MCP Registry entry (#10) (@nabsha)
• 3a85156: guard: deny agent writes to the pointer file (#15) (@nabsha)
• 0058a84: policy: standard and strict modes, audit log, vault-anchored blessing (#18) (@nabsha)
• 44530d3: release: prepare v0.2.0 (#19) (@nabsha)
• 65ad4a2: run: mask injected values in captured child output (#16) (@nabsha)
• d255904: run: pin injection to a committed argv allowlist (#17) (@nabsha)