Release v1.3.0

- **Rate limit intelligence** — full rate-limit-aware agentic loop: parses `anthropic-ratelimit-*` headers, tracks cumulative token/request usage, auto-retries on 429 (capped at 60s), and proactively waits before hitting limits. Includes adaptive threshold (avg cost × 1.2), live countdown, micro-wait for ≤5s resets, and qualitative budget tiers (`healthy`/`moderate`/`low`) so the model stays calm under pressure
- **Context usage display** — `⟡ 6.2% context | 21K / 50K tokens, 3 calls` shown after every API call; full details in `--debug`
- **Iteration-aware budget notes** — turns are numbered `[turn N/50]`; forced wrap-up after 15 turns to prevent infinite exploration. Tool call batching hints encourage the model to batch independent calls per turn
- **Thinking spinner** — animated braille-dot spinner during tool-use API calls
- **Navigation tools** — `cwd` (always available) and `change_directory` (when `restrict_to_cwd = false`) let the model navigate projects; CWD is injected into the system prompt
- **Dynamic AGENTS.md reloading** — system prompt rebuilds on every `cd` and AI turn, picking up the new project's AGENTS.md automatically
- **Smarter file & search tools** — `grep_files` returns 5 context lines around matches with markers and merged overlaps; `read_file` shows file size metadata and hard-truncates at 5KB (directing the model to use line ranges for larger files); debug mode shows matched paths with line numbers and session UUID
- **Secret redaction** — built-in patterns (API keys, AWS keys, PATs, Slack/bearer tokens) are always active; users can add extra patterns via `[safety.redaction]` config. New `src/provider/redaction.rs` module with `OnceLock`-cached compiled regexes
- **`ait init`** — AI-powered AGENTS.md generator (explores project, drafts, opens in `$EDITOR`)
- **`ait new`** — top-level shorthand for `ait session new`
- **GitLab CI** — lint (`clippy` + `fmt`), test, and release stages with binary artifact and changelog extraction
- GitLab issue templates (`Bug.md`, `Feature.md`) and MR template (`Default.md`)
- `CONTRIBUTING.md` with prerequisites, build/test/lint, branching conventions, and MR workflow

- **System prompt rewritten** — grep-first file searching, 5KB read threshold with mandatory line ranges, tier-based token budget guidance with "do not panic" framing
- **Tighter context condensing** — `CONDENSE_KEEP_RECENT` 8→4, `CONDENSE_PREVIEW_CHARS` 200→120 (roughly halving per-request cost); last 3 tool results kept uncompressed (up from 1)
- **`[safety.files]` whitelist now empty by default** — all file writes require confirmation; `restrict_to_cwd` and universal blacklist remain as safety net
- API internals: `tool_definitions()` takes `&Config` for dynamic tool sets; `complete_with_tools()` returns `(ApiResponse, RateLimitInfo)`; `ApiResponse` includes token counts; `AnthropicProvider::from_config()` takes full `Config` for redaction access; all config structs derive `Clone`
- Default config template updated with `[safety.redaction]` section

- Added `regex` 1.0 (redaction pattern matching)