Release 0.1.5 with secrets and key management
Add secrets, SSH, and Tailscale auth key APIs and Sandbox helpers.
Use libsodium sealed boxes for client-side encryption of private and
auth keys. Store redacted values alongside encrypted secrets and bundle
default server public key for production API