chore: release v0.6.0

Highlights since v0.5.0:
- feat: multi-header auth for VTEX-style APIs (#20, PR #21)
  - --header / -H flag, repeatable, works inline and via `auth login` profiles
  - $VAR / ${VAR} expansion per header value with empty-var warning
  - --agent-help now suggests multi-header usage on specs with 2+ apiKey schemes
- fix: mask all auth header values in --verbose output (not just Authorization)
- fix: reject CR/LF in header names/values (RFC 7230 injection guard)
- fix: parse object and array params from JSON strings (#15, PR #19)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: lucianfialho

package.json

@@ -1,6 +1,6 @@
 {
   "name": "spec2cli",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "type": "module",
   "main": "dist/index.js",
   "bin": {

src/index.ts

@@ -21,7 +21,7 @@ const program = new Command();
 program
   .name("spec2cli")
   .description("Turn any OpenAPI spec into a CLI. No code generation, no build step.")
-  .version("0.5.0")
+  .version("0.6.0")
   .addHelpText("after", `
 Commands (registry):
   use <api> [args...]     Use an API from the registry