chore(release): 2.8.1

Fixes the S3358 nested-ternary regression in the new `worktrees unlock`
command (worktrees_cmd.py), which is a gated file and kept the release
commit red, and re-cuts the release as 2.8.1. Content is otherwise the
intended 2.8.0 (Codex OAuth fix, worktree GC reliability, the unlock
command, and the security cleanup); 2.8.0 was never tagged.

Author: chernistry

docs/release-notes/v2.8.0.md docs/release-notes/v2.8.1.mddocs/release-notes/v2.8.0.md renamed to docs/release-notes/v2.8.1.md

@@ -1,4 +1,4 @@
-# v2.8.0
+# v2.8.1
 
 Released 2026-06-25.
 

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "bernstein"
-version = "2.8.0"
+version = "2.8.1"
 description = "Audit-grade multi-agent orchestration for CLI coding agents (Claude Code, Codex, Gemini CLI, and 40 more): HMAC-chained audit log, signed agent cards, per-artefact lineage, air-gap deploy. The orchestrator your compliance team will sign off on."
 readme = "README.md"
 requires-python = ">=3.12"

src/bernstein/cli/commands/worktrees_cmd.py

@@ -693,7 +693,7 @@ def unlock_cmd(workdir: Path, force: bool, as_json: bool) -> None:
     age = status.get("age_seconds")
     age_str = f"{int(age)}s" if isinstance(age, (int, float)) else "unknown age"
     owner = f"pid {pid}" if pid else "an unknown process"
-    liveness = "alive" if alive else ("not running" if alive is False else "liveness unknown")
+    liveness = {True: "alive", False: "not running", None: "liveness unknown"}[alive]
 
     if as_json:
         click.echo(json.dumps({**status, "removed": removed}, default=str))