v1.2.1

Patch candidates after v1.2.0: bounded native Claude discovery (#317 / PR #319), canonical companion skill snapshot (#302 / PR #303), bounded frontmatter reader (#318 / PR #320), and CI-discovered owned remote-update staging cleanup across handled initialization signals (#322, follow-up in PR #321). Preserve explicit-root, privacy, ownership, strict receipt and no-automatic-resend boundaries. Independent CLI review before PR changes. Milestone assignment does not authorize merge, tags, publication, global installation or operations; no committed release date.