feat: send X-Scholar-Client trusted-client handshake header (0.1.1)

Every request now carries `X-Scholar-Client: scholar-sidekick-cli/<version>`
in addition to User-Agent, so anonymous calls land on the recognised
trusted-client tier of the Scholar Sidekick API (the server accepts any
`scholar-sidekick-*` tag — no server change needed). Bump 0.1.0 -> 0.1.1.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: mlava

package.json

@@ -1,6 +1,6 @@
 {
   "name": "scholar-sidekick-cli",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Command-line client for Scholar Sidekick — resolve any scholarly identifier (DOI, PMID, PMCID, ISBN, arXiv, ISSN, ADS, WHO IRIS) into 10,000+ CSL citation styles or nine export formats, and run retraction, open-access, and citation-verification checks, straight from your terminal.",
   "license": "MIT",
   "author": "Scholar Sidekick",

src/config.ts

@@ -73,6 +73,9 @@ export function resolveConfig(opts: GlobalOptions, env: NodeJS.ProcessEnv = proc
 
   const headers: Record<string, string> = {
     "User-Agent": `scholar-sidekick-cli/${VERSION}`,
+    // Trusted-client handshake: the API recognises any `scholar-sidekick-*` tag
+    // and grants the anonymous tier without a key (see scholar-sidekick guard.ts).
+    "X-Scholar-Client": `scholar-sidekick-cli/${VERSION}`,
   };
   if (mode === "rapidapi") {
     headers["X-RapidAPI-Key"] = rapidApiKey!;

test/config.test.ts

@@ -14,6 +14,13 @@ describe("resolveConfig — auth modes", () => {
     expect(c.headers["User-Agent"]).toMatch(/^scholar-sidekick-cli\//);
   });
 
+  it("always sends the X-Scholar-Client trusted-client handshake header", () => {
+    for (const over of [{}, { rapidapiKey: "rk" }, { apiKey: "sk" }]) {
+      const c = resolveConfig(over, EMPTY);
+      expect(c.headers["X-Scholar-Client"]).toMatch(/^scholar-sidekick-cli\/\d/);
+    }
+  });
+
   it("uses RapidAPI mode + host when a rapidapi key is given (flag wins)", () => {
     const c = resolveConfig({ rapidapiKey: "rk" }, { RAPIDAPI_KEY: "envk" } as NodeJS.ProcessEnv);
     expect(c.mode).toBe("rapidapi");