Bump github.com/vincentsch/rungrad from 0.2.2 to 0.3.2

[dependabot]

Bumps github.com/vincentsch/rungrad from 0.2.2 to 0.3.2.

Release notes

Sourced from github.com/vincentsch/rungrad's releases.

rungrad v0.3.2

Adds multiple-choice questions.

• ConfirmDestructive now asks a labelled question ("Yes, continue" / "No, cancel") with the safe answer preselected, instead of [y/N]. --confirm and the non-interactive refusal work as before.
• New choose package, plus Factory.Chooser() and Factory.CanPrompt(), for asking your own questions. See "Asking a question" in docs/building-a-cli.md.
• On a terminal, only the up and down arrows move the highlight and only Enter chooses. Typed or pasted text, function keys and typeahead cannot confirm, and the terminal is restored if the process is signalled.
• Elsewhere (pipes, dumb terminals, Windows consoles, NoANSI), the question is a numbered list. Only an exact number, y/yes/n/no or the full label counts as an answer. NO_COLOR is honoured and output is redacted.

Existing Go APIs are unchanged. A scripted answer piped to ConfirmDestructive must now be an exact answer; a blank line still declines.

rungrad v0.3.1

Fixes generated Agent Skills metadata.

• Quote the skill name in YAML frontmatter so names such as true stay strings.
• Reject invalid skill names when using rungrad new --product-profile --skill: names longer than 64 characters, trailing hyphens, or consecutive hyphens.
• Clarify the generated skill's safety guidance and the docs for skill distribution.

Existing Go APIs, command behavior, and scaffold names without --skill are unchanged. With --skill, previously accepted names that produced invalid skills now return a validation error.

rungrad v0.3.0

Adds agent distribution metadata and repository-scoped skill scaffolding for product CLIs.

Changes:

• Add agentmeta, a pure projection from rungrad-manifest/1 into command inventory for agent-facing artifacts.
• Add rungrad new --product-profile --skill to generate a conservative repository-scoped SKILL.md starter.
• Keep MCP runtime, OAuth, hosted providers, and marketplace packaging outside rungrad; product repos own those layers.
• Keep handler-owned auth resolution for commands that need to resolve credentials inside the handler.

Compatibility:

• Additive release. Existing rungrad-manifest/1, rungrad-spec/1, command flags, and default scaffold behavior are unchanged.
• rungrad is still pre-1.0, so the Go API can change before a stable 1.0 release.

QA:

• go vet ./...
• go build ./...
• go test ./...
• go test -race ./...
• GitHub CI on main passed for the release commit.

Commits

• c257945 Merge pull request #6 from vincentsch/multiple-choice-prompts
• 6629a51 Treat a lone Esc as Esc, keep the final answer on one line, count more emoji ...
• 165cc8b Make the chooser arrow-only so typing can never confirm
• 5349311 Harden the chooser against accidental confirmation
• 1eee991 Prepare v0.3.2 release
• bb2e7d7 Ask questions as multiple choice instead of [y/N]
• b5de2e9 Merge pull request #5 from vincentsch/release/v0.3.1
• 0152c68 Check release verification commands without whitespace coupling
• cf82f0d Verify releases with an isolated installed binary
• 249562e Correct skill release checklist test name
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.