v0.2.1

Fix macOS hang: use current_exe() and guard against exec loops

/proc/self/exe doesn't exist on macOS, causing find_system_npx to
skip the self-detection check and exec itself in an infinite loop.
Use std::env::current_exe() which is cross-platform, and add a
Y_NPX_WRAPPER env var guard as a second line of defense.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

v0.2.0

Add y-npx wrapper that can block non-whiltelisted npx invocations

Agents never hesitate to prefix the workflow command you suggest with `npx `. Say `turbo` and they gladly run `npx turbo` regardless if turbo is in PATH or not. Uncontrolled use of `npx` is a major security risk.

v0.1.0

fix typo