v0.3.0 — credential profiles, time-tracking skill, client reliability

@zeyos/client

• Single-flight token refresh — concurrent operations share one getToken instead of each firing its own (avoids redundant calls and refresh-token-rotation failures).
• Request timeout — timeoutMs (per-request or config.timeoutMs), composed with any AbortSignal.
• Network-error retries (reads only) — dropped connections/timeouts retried for safe reads; writes never auto-retried. Override via retryOnNetworkError.
• Auto-pagination — client.paginate() async iterator + client.collect().
• Richer errors — server error detail folded into ZeyosApiError.message.

@zeyos/cli (zeyos)

• Named credential profiles — zeyos profile list|current|use|add|remove, global --profile, ZEYOS_PROFILE, project pins (.zeyos/profile); login --profile, profile-aware logout.
• Expired-token detection on login; friendlier whoami 503/401 messages.

Agent skills

• New zeyos-time-tracking skill: first-person work views + interactive time logging (resolve account → pick ticket/task → write effort as an actionstep), timesheet summaries, entry corrections.

Full notes in CHANGELOG.md.