fix: add ConfigSetCommandTests to ConfigFile collection for test isolation

fix(test): use SemanticCache constructor to test Unix permissions correctly

chore: bump version to 0.6.0 for security hardening release

docs: merge security decisions from inbox, clean up

fix(test): clean up user-secrets in config tests to prevent cross-test pollution

docs: Update Trinity history and team decision for security hardening

fix(security): Phase 3 — Error sanitization, cache permissions, convention alignment, test updates

test(security): comprehensive security tests for all 14 findings

fix(security): FINDING-003 — LLM response validation and prompt hardening

fix(security): Phase 2 — Path traversal, symlinks, SSRF, CI injection, privacy warning

fix(security): Phase 1 — Critical path XSS, Cypher injection, and API key hardening

Scribe: Merge security audits into decisions, create session log

feat: security audit — Seraph hired, full code + architecture review

docs: merge v0.5.0 NuGet release decisions and milestones

docs: add NuGet version, downloads, and publish badges to README