0.5.1 (2026-04-20) Bug Fixes enforce Bash path constraints after sandbox allow (#777) (7002cb3) enforce MCP OAuth callback state before errors (#775) (739b8d1) require trusted approval for sandbox override (#778) (aab4890)
