chore: bump to v0.18.1 + gitignore carl.yaml + fix uv workspace

Version bump 0.18.0 -> 0.18.1. Carries all the v0.18 papercuts + the
post-v0.18 fixes shipped since 2026-04-24 (journey matrix, camp login
JWT bearer resolution, publish workflow trigger on v* tag push).

`uv lock` regenerated (was stale at 0.6.0 in the lockfile; carl-studio
line now reads 0.18.1).

Gitignore additions:
- carl.yaml — project-local training config. Users commonly put dataset
  paths AND sometimes secrets there; layered read by CARLSettings still
  works unchanged. Per CLAUDE.md "never log or persist secrets" this
  keeps accidental secret leaks out of commits. Commit a
  carl.yaml.example if you want to share config.

Workspace fix:
- `[tool.uv.workspace] exclude = ["packages/emlt-codec-ts"]` — the TS
  sibling package has no pyproject.toml and was making `uv lock` fail
  with "Workspace member … is missing a pyproject.toml". This had been
  blocking CI's `uv lock --check` step transparently.

Build verified: carl_studio-0.18.1.tar.gz + wheel produced locally.

Tag push of v0.18.1 after this commit will trigger the newly-fixed
publish workflow and push 0.18.1 to PyPI via OIDC trusted publishing.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: wheattoast11

.gitignore

@@ -33,3 +33,9 @@ env/
 .claude/scheduled_tasks.lock
 # v0.18 Track B — project-local .carl/ scaffold
 .carl/
+
+# Project-local training config. CARLSettings layers this file in, and
+# users commonly drop dataset paths, hub namespaces, and occasionally
+# secrets into it. Keep it out of version control by default — commit a
+# `carl.yaml.example` template instead if you want to share settings.
+carl.yaml

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "carl-studio"
-version = "0.18.0"
+version = "0.18.1"
 description = "CARL (Coherence-Aware Reinforcement Learning) — information-theoretic reward signals for LLM training via token-level probability distributions"
 readme = "README.md"
 license = "MIT"
@@ -133,6 +133,10 @@ packages = ["src/carl_studio"]
 
 [tool.uv.workspace]
 members = ["packages/*"]
+# Exclude non-Python sibling packages from the uv workspace (they use their
+# own tooling — npm for emlt-codec-ts). Without this, `uv lock` fails with
+# "Workspace member … is missing a pyproject.toml".
+exclude = ["packages/emlt-codec-ts"]
 
 [tool.uv.sources]
 carl-core = { workspace = true }

src/carl_studio/__init__.py

@@ -8,7 +8,7 @@
 See also: carl.py (300-line seed crystal at the repo root)
 """
 
-__version__ = "0.18.0"
+__version__ = "0.18.1"
 
 from typing import TYPE_CHECKING