MCP Zero Trust Layer 0.1.1

Patch release focused on discovery correctness for policies with call-time guards.

Fixed:

• Capability discovery no longer runs call-time validators or required input checks for tools/list, resources/list and prompts/list.
• Tools protected by validators such as sql_read_only now remain visible during discovery.
• Tools with input.required_fields now remain visible during discovery, while actual calls still enforce the input contract.

Verified before release:

• ruff check .
• pytest -q with 84 passing tests
• python -m build
• twine check dist/*
• clean wheel install smoke test
• Docker build and runtime smoke test