MCP Zero Trust Layer 0.1.3

Added

• Added mcpzt demo to generate a runnable local demo with a fake MCP upstream, policy config, demo client and shell runner.
• Added mcpzt approve list --format json for automation-friendly approval review.
• Added mcpzt config lint with table and JSON output for insecure or fragile configuration patterns.
• Added stricter doctor modes with mcpzt doctor --strict and mcpzt doctor --production.
• Added release workflow steps for official GHCR container publishing and post-publish PyPI install verification.

Changed

• Updated public install and deployment guidance for the current 0.x line instead of hard-coding stale point-release language.
• Updated Docker Compose and Helm defaults to use the official ghcr.io/686f6c61/mcp-zero-trust-layer image path.
• Clarified that claude-code client config output is a shell command, while json is the machine-readable format.
• Kept generated demo audit and approval state inside the demo directory when running run_demo.sh.
• Avoided creating an approval lock file when listing an empty, not-yet-created approval store.

Container Images

• Published official GHCR tags 0.1.3, 0.1 and latest with linux/amd64 and linux/arm64 manifests.