Sando 0.6.1 — hotfix

Changelog: 0.6.1

0.6.1 — hotfix

• Fixes partial redaction of quoted credentials, escaped or truncated values, and Authorization headers. Custom assignment rules receive the same protections.
• Preserves original shell behavior for grep/rg searches, cat display flags, compound commands, newlines, and empty arguments. Commands that cannot be safely rewritten use the shell wrapper or remain untouched when wrapping is disabled.
• Returns exit status 1 for explicit CLI searches with no matches and preserves literal operands after --.
• Hardens artifact reuse across CLI, hooks, and history storage: existing symlinks, hardlinks, and non-regular files are rejected before content reads or permission changes.
• Restricts the experimental shadow compactor to complete lines from the redacted source in their original order, including cached results. This checks extractive grounding, not preservation of every omitted fact; it does not change live request traffic.

Validation: 634 tests passed with the pinned native Slice backend enabled, zero failures or skips, plus 27 independent acceptance checks. JavaScript syntax and bundle parity checks passed. No new provider-savings claim is made.