release: cli 0.3.11 + hermes 0.3.8 - init-perms 0700 + claude-mcp post-wire verify (cli); prefetch untrusted-context fence (hermes)

release: sibyl-memory-cli 0.3.9 (guided `sibyl migrate` + Codex + Claude MCP fix)