v0.3.2

Added

• Context-local scope() API for narrowing allowed destinations within a block of code.
  Usable as both a context manager (with tethered.scope(allow=[...]):) and a decorator
  (@tethered.scope(allow=[...])). Supports log_only, fail_closed, allow_localhost,
  and on_blocked options. Scopes use intersection semantics — they can only narrow the
  global policy, never widen it. Safe for concurrent use across threads and async tasks.
• Input validation on activate() and scope() parameters (type checks for allow,
  on_blocked, locked, log_only, fail_closed, allow_localhost).
• Runnable examples in examples/.