chore(release): prepare v0.1.18

[chaliy]

Summary

• Bump workspace version 0.1.17 → 0.1.18
• Update CHANGELOG.md with 50 PRs since v0.1.17
• Sync JS package version and lock files

Highlights

• Hooks system — New interceptor hooks with tool-level pipeline integration and HTTP hook support
• Interactive shell — Full REPL mode with rustyline line editing, tab completion, and streaming output
• Security hardening — SSRF prevention, MCP rate limiting, template injection fixes, secret redaction, and host key verification
• Expansion fixes — Correct ${@/#/prefix} per positional param, mixed literal+quoted ${var#pattern}, and backreferences in sed
• Async Python callbacks — ScriptedTool now supports async Python callbacks with ContextVar propagation