chore: use valid CODEOWNERS owner and note unreleased changes

An organization handle is not a valid CODEOWNERS owner, so review
routing did not fire; use the maintainer account instead.

Record the .pythinker/AGENTS.md removal (with migration guidance) and
the network-shell hardening under the Unreleased changelog section.

Author: elkaix

.github/CODEOWNERS

@@ -8,23 +8,23 @@
 # breaking-change regressions (e.g. pydantic 2.13 alias serialization).
 
 # Default fallback: project owner reviews everything not matched below.
-*                                @Pythoughts-labs
+*                                @mohamed-elkholy95
 
 # Dependency surfaces: explicit owner.
-pyproject.toml                   @Pythoughts-labs
-uv.lock                          @Pythoughts-labs
-**/pyproject.toml                @Pythoughts-labs
-**/uv.lock                       @Pythoughts-labs
-package.json                     @Pythoughts-labs
-package-lock.json                @Pythoughts-labs
-**/package.json                  @Pythoughts-labs
-**/package-lock.json             @Pythoughts-labs
+pyproject.toml                   @mohamed-elkholy95
+uv.lock                          @mohamed-elkholy95
+**/pyproject.toml                @mohamed-elkholy95
+**/uv.lock                       @mohamed-elkholy95
+package.json                     @mohamed-elkholy95
+package-lock.json                @mohamed-elkholy95
+**/package.json                  @mohamed-elkholy95
+**/package-lock.json             @mohamed-elkholy95
 
 # Telemetry & monitoring config — contractual changes need a closer look.
-src/pythinker_code/telemetry/    @Pythoughts-labs
-docs/en/reference/telemetry.md   @Pythoughts-labs
+src/pythinker_code/telemetry/    @mohamed-elkholy95
+docs/en/reference/telemetry.md   @mohamed-elkholy95
 
 # CI workflows — branch protection / required-status-check changes shouldn't
 # slip in unnoticed.
-.github/workflows/               @Pythoughts-labs
-.github/CODEOWNERS               @Pythoughts-labs
+.github/workflows/               @mohamed-elkholy95
+.github/CODEOWNERS               @mohamed-elkholy95

CHANGELOG.md

@@ -15,6 +15,14 @@ GitHub Releases page; `0.8.0` is the new starting line.
 
 ## Unreleased
 
+### Changed
+
+- **`.pythinker/AGENTS.md` is no longer loaded as project instructions.** Only `AGENTS.md`/`agents.md` from the project root down to the working directory are merged. Move any instructions kept solely in `.pythinker/AGENTS.md` to a root or directory-level `AGENTS.md`.
+
+### Security
+
+- **Read-only subagent profiles now block network shell commands.** The `read_only`/`plan`/`review`/`verify` permission profiles deny `curl`/`wget`/`ssh`/`git fetch` and similar network clients, so a read-only agent's no-web-tools intent cannot be bypassed through the Shell tool.
+
 ## 0.28.0 (2026-05-31)
 
 ### What changed in this release