Release 1.0.8: version bump to ship Wave 8 audit remediation (VERDICT: PASS)

- package.json 1.0.7 -> 1.0.8
- src/version.ts HARNESS_RELEASE_VERSION 1.0.7 -> 1.0.8
- Triad: programmer green (267 pass), QA PASS (S1/S2 red-proofs), drift-guard VERDICT: PASS
- Ships: wave-8 audit remediation (P0 guards/taint/symlink, P1 roles/SSRF/rollback/retry, P2/P3 deps/CI/receipts)

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@heretek-ai/opencode-harness",
-  "version": "1.0.7",
+  "version": "1.0.8",
   "description": "Plugin-first OpenCode v2 in-process harness for Muse 1.3: zero-patch Edit/Read/Patch/Shell/Subagent/Retry interceptors, post-formatter FNV-1a anchor resync receipts, cross-file import/export contract verification, atomic multi-file rename_symbol, Dual Direct + Code Mode (tools.harness.*) tools, Hashline edits, AST codemods, PageRank RepoMap, blast-radius & dead-code architecture auditing, atomic transactions, KV-cache-safe context budgeting, permission/taint guards, and DOM geometry auditing.",
   "license": "MIT",
   "repository": {

src/version.ts

@@ -2,5 +2,5 @@
  * Single source of truth for the harness version. Must equal
  * `package.json#version` (asserted by `test/bootstrap.test.ts`).
  */
-export const HARNESS_RELEASE_VERSION = "1.0.7";
+export const HARNESS_RELEASE_VERSION = "1.0.8";
 export const HARNESS_VERSION = HARNESS_RELEASE_VERSION;