fix(auth): scope path-like name args by command

- Stop treating property names as vault paths during policy checks.
- Keep rename name targets protected by path restrictions.
- Add regression coverage for property:set name=from.
- Add regression coverage for blocked rename targets.
- Bump package version to 1.0.4 for the Docker image tag.

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "obsidian-api"
-version = "1.0.3"
+version = "1.0.4"
 description = "HTTP API wrapper for running Obsidian CLI commands from n8n, SDKs, or agent harnesses."
 requires-python = ">=3.14"
 dependencies = [