fix(auth): scope path-like name args by command

- Stop treating property names as vault paths during policy checks.
- Keep rename name targets protected by path restrictions.
- Add regression coverage for property:set name=from.
- Add regression coverage for blocked rename targets.
- Bump package version to 1.0.4 for the Docker image tag.

uv.lock

@@ -123,7 +123,7 @@ wheels = [
 
 [[package]]
 name = "obsidian-api"
-version = "1.0.3"
+version = "1.0.4"
 source = { virtual = "." }
 dependencies = [
     { name = "starlette" },