v1.3.0 release

Phase 1 post-audit hardening: 20 focused PRs + follow-up #413 + 7 audit fix commits + 1 install-test sandbox fix.

Staging-merge validated: 3529 tests green, full 8-check battery passing.
Real install-test verified from clean npm-installed package.

Published to npm as [email protected].

chore(release): bump version to 1.2.7 and publish notes

release: ship v1.2.6 forwarded observability fix

Record forwarded Codex request traffic in runtime observability when the child process leaves the snapshot unchanged, and publish the 1.2.6 release notes and version metadata.

release: finalize v1.2.5 metadata

Align main with the published 1.2.5 package so the repository version and release docs match the npm release.

docs: refresh v1.2.4 release notes

Merge pull request #355 from ndycode/release/rebuild-main-pr-wave-1.2.3

release: rebuild main PR wave for v1.2.3

Merge pull request #336 from ndycode/release/integration-1.2.2

release: align main with published 1.2.2

release: ship v1.2.1

\ Release v1.2.0\

fix(quota): keep multi-workspace fallbacks distinct (#122)

* test: broaden multi-workspace issue 121 coverage

* fix(quota): handle multi-workspace cache fallbacks

* fix(quota): close review gaps for mixed fallback state

* fix(cli): tighten quota cache probe persistence

* fix(cli): isolate live forecast quota cache

* test(quota): cover windows save failures

* test(quota): cover concurrent cache save retries

* fix(cli): align forecast quota cache handling

* test(cli): close quota review gaps

* fix(quota): prune stale live email fallbacks

* test(quota): clean up scoped account mock resets

---------

Co-authored-by: ndycode <[email protected]>