feat: add secure envsitter dotenv operations

Expose validate/copy/format/annotate tools with dry-run by default, and switch is_equal matching to candidate hashing. Remove prompt-append warning to avoid writing into OpenCode input.

package-lock.json

@@ -10,7 +10,7 @@
       "license": "MIT",
       "dependencies": {
         "@opencode-ai/plugin": "^1.1.14",
-        "envsitter": "^0.0.2"
+        "envsitter": "^0.0.3"
       },
       "devDependencies": {
         "@types/node": "*",
@@ -45,9 +45,9 @@
       }
     },
     "node_modules/envsitter": {
-      "version": "0.0.2",
-      "resolved": "https://registry.npmjs.org/envsitter/-/envsitter-0.0.2.tgz",
-      "integrity": "sha512-2rVcSQnRrDqk//2XM5c+M85YkNc6ljFgfMC4gBTvA/U21OUGB53zfANIEZZXfOcSVNmoRHVCGcogFHLHsBjd1w==",
+      "version": "0.0.3",
+      "resolved": "https://registry.npmjs.org/envsitter/-/envsitter-0.0.3.tgz",
+      "integrity": "sha512-l7YuX/ptwODY0ooU5JuPLN5zrNpjoWU5O01Wi66t24FRYLrXK33ReEr3/TP4Fhaa+S4sQ7uBMLIe8VGmgvIs9g==",
       "license": "MIT",
       "bin": {
         "envsitter": "dist/cli.js"