v0.1.2

Release v0.1.2

`envpass` will no longer start the passkey flow if all environment variables
are already encrypted on `envpass encrypt`, or all variables are already
decrypted on `envpass decrypt`. This change improves the UX when calling
these subcommands repeatedly (e.g., as part of an npm `prestart` script).

Security improvements to the passkey bridge:
- Hardened client-side HTTP headers, including setting a restrictive CSP.
- Improved server-side HTTP header validation to mitigate cross-origin
requests.
- Pass raw PRF bytes over the network instead of a JSON string (which
also simplifies the implementation).

Other minor improvements to the passkey bridge page style and documentation
(type annotations).
-----BEGIN SSH SIGNATURE-----
U1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAg4OaSdijsW6raSPK3llrsZIEdtk
SQaGaXESF8DcruCNgAAAADZ2l0AAAAAAAAAAZzaGE1MTIAAABTAAAAC3NzaC1lZDI1NTE5
AAAAQLS4Zpvz8sTiO6cHqNao7vcQ54yAFRGphtpQ+dJYOG1C0QrkcyszVlvn4HcOcbDGZA
IjKC2PswxjGLoRGy0pjwI=
-----END SSH SIGNATURE-----