chore(release): cut 0.1.29

[Jason Robert (jrob5756)]

Release 0.1.29

Release-prep PR for 0.1.29 (previous tag: v0.1.28).

Bumps [project].version in pyproject.toml, finalizes the [Unreleased]
section of CHANGELOG.md into a versioned 0.1.29 section, and re-locks
uv.lock.

Commit audit

All 6 commits in v0.1.28..main were audited; every one has an explicit
disposition.

#	SHA	Subject	Closes	Class	Changelog
1	3fd5f55	fix(executor): quadratic backtracking in linkify_markdown (#423)	#395	Fixed	added here
2	3de3457	fix(web): harden dashboard auth with Origin/Host validation and tokens (#424)	#397	Security	already present
3	d9299a9	fix(aca): harden agent runner transport security (#426)	#396	Security	added here
4	cd33903	docs(web): document Windows token-file permission behavior (#428)	#425	Docs	folded into the #397 entry
5	77d5126	fix(pricing): stop billing cached tokens twice (#427)	—	Fixed	already present
6	8f22e0a	feat(doctor): surface model pricing source in doctor diagnostics (#429)	#386	Added + Fixed	already present

No entries were stale or inaccurate; nothing was omitted silently.

Changelog summary

Security

• Hardened the web dashboard's HTTP/WebSocket surface (Harden the web dashboard request surface: origin/host validation and consistent auth across HTTP + WebSocket #397) — per-run token
  on every mutating route and the /ws handshake, OriginHostGuard
  Host/Origin validation, and a required Content-Type: application/json
  (breaking for external API callers).
• Hardened the ACA agent runner's transport surface (Harden conductor-agent-runner: don't depend solely on network isolation #396) — loopback-only
  default bind, opt-in ACA_RUNNER_AUTH_TOKEN gate on /execute, an
  inner_provider_settings key allowlist, and optional
  ACA_RUNNER_ALLOWED_BASE_URLS.

Fixed

• Token cost is no longer massively overstated for cached, tool-calling
  agents — cached buckets are subtracted from the input bucket before the
  input rate applies. Review limits.budget_usd values, which were
  calibrated against the inflated figures.
• A pathological gate or dialog prompt no longer stalls the event loop (perf(executor): linkify_markdown is O(n²) on backtick/bracket runs and stalls the event loop #395).
• claude-opus-5 and the dotted Claude 4.5 names are no longer unpriced.
• gpt-5.6-sol / -terra / -luna are no longer unpriced (Cost is unpriced for current models: the provider pricing hook returns None for every model, and DEFAULT_PRICING lacks claude-opus-5 / gpt-5.6-sol #386).

Added

• conductor doctor --models now shows per-model pricing and its source
  (Cost is unpriced for current models: the provider pricing hook returns None for every model, and DEFAULT_PRICING lacks claude-opus-5 / gpt-5.6-sol #386).

Validation

All run from the release worktree at chore/release-0.1.29:

• make check — ruff check, ruff format --check, ty check — passed
• make test — 6402 passed, 39 skipped, 8 deselected
• make validate-examples — passed (exit 0; no schema/example files
  changed in this range, run as insurance)
• git diff --check — clean
• uv.lock diff is exactly the conductor-cli project version

Diff is limited to CHANGELOG.md, pyproject.toml, and uv.lock.

After merge

Merging this PR will be followed by pushing the v0.1.29 tag at the merge
commit, which triggers .github/workflows/release.yml and creates the GitHub
Release with its artifacts. The release is not created manually.