v0.11.0

Added

• MCP tool annotations derived from each tool's governance risk_level, so
  clients can gate approval from tools/list alone. low tools advertise
  readOnlyHint: true; every other tool advertises readOnlyHint: false and
  destructiveHint: true. The medium tier includes deletes and hard
  power-offs, so a tool is never advertised as non-destructive on the strength
  of its tier. idempotentHint only repeats an explicit declaration. The exact
  level is published in _meta under io.github.AIops-tools/riskLevel. These
  are hints for the client; audit and undo are unchanged.

Fixed

• lock_wait_rca: the chain root's query was turned back into "" after the
  read layer had correctly returned null. InnoDB reports a NULL statement for
  a transaction left open while its session sits idle — the most common chain
  root — and the action then recommended kill_query, which has nothing to stop.
  rootQuery is now null in that case, each root carries rootTrxState and
  rootIdle (null when the statement was never reported), and the action for an idle root points at
  kill_session (which rolls the transaction back) and says why.