agent-paste CLI cli-v0.1.7

What's changed

• feat(cli,mcp): standardize unlisted visibility (#537)
• fix(deps): unblock security audit gate (#535)
• fix(api): allow API keys to create Share Links (#534)
• Harden MCP recovery docs and secret rotation (#533)
• feat(cli,mcp): add literal edit surfaces
• Shared revise engine (revise-core) + member private_url + render_mode inheritance (#530)
• feat: git-like revision model — commit chain, server-reconstructed delta, agent read-back (ADR 0088/0089/0090) (#529)

Standalone CLI binaries cross-compiled with bun build --compile. macOS binary is codesigned + notarized. Each binary carries a GitHub build-provenance attestation (verify: gh attestation verify <binary> --repo zaks-io/agent-paste) and an attached SLSA provenance sidecar (*.intoto.jsonl). A CycloneDX SBOM of exactly what is compiled into the binary (agent-paste-cli.sbom.cdx.json), a blocking grype scan report (agent-paste-cli.grype.json), scanner/DB versions (scan-metadata.json), and repo security attestation bundle (repo-security-attestation.tgz) are attached. Draft - review and publish manually. Verify downloads against SHA256SUMS.