fix(auth): scope path-like name args by command

- Stop treating property names as vault paths during policy checks.
- Keep rename name targets protected by path restrictions.
- Add regression coverage for property:set name=from.
- Add regression coverage for blocked rename targets.
- Bump package version to 1.0.4 for the Docker image tag.

tests/test_api.py

@@ -157,6 +157,30 @@ def test_token_policy_restricts_path(monkeypatch):
   assert response.status_code == 403
   assert response.json()["detail"].startswith("token is not allowed to access path: Private/Secret.md")
 
+def test_property_set_name_is_not_treated_as_path(monkeypatch):
+  token = use_jwt_auth(monkeypatch, {"sub": "journal", "commands": ["property:set"], "vaults": ["*"], "paths": ["00. Journal/"]})
+
+  response = client.post(
+    "/commands",
+    headers={"Authorization": f"Bearer {token}"},
+    json={"args": ["property:set", "path=00. Journal/Note.md", "name=from", "value=Daniel", "type=text"]},
+  )
+
+  assert response.status_code == 200
+  assert response.json()["command"] == ["python", "property:set", "path=00. Journal/Note.md", "name=from", "value=Daniel", "type=text"]
+
+def test_rename_name_is_treated_as_path(monkeypatch):
+  token = use_jwt_auth(monkeypatch, {"sub": "journal", "commands": ["rename"], "vaults": ["*"], "paths": ["00. Journal/"]})
+
+  response = client.post(
+    "/commands",
+    headers={"Authorization": f"Bearer {token}"},
+    json={"args": ["rename", "path=00. Journal/Old.md", "name=Private/New.md"]},
+  )
+
+  assert response.status_code == 403
+  assert response.json()["detail"].startswith("token is not allowed to access path: Private/New.md")
+
 def test_token_policy_allows_allowed_path(monkeypatch):
   token = use_jwt_auth(monkeypatch, {"sub": "inbox", "commands": ["read"], "vaults": ["*"], "paths": ["Inbox/"]})