v0.11.0

Added

• MCP tool annotations derived from each tool's governance risk_level, so
  clients can gate approval from tools/list alone. low tools advertise
  readOnlyHint: true; every other tool advertises readOnlyHint: false and
  destructiveHint: true. The medium tier includes deletes and hard
  power-offs, so a tool is never advertised as non-destructive on the strength
  of its tier. idempotentHint only repeats an explicit declaration. The exact
  level is published in _meta under io.github.AIops-tools/riskLevel. These
  are hints for the client; audit and undo are unchanged.

Fixed

• blocking_lock_chain_rca: the chain root's state was dropped and a missing
  query became "". For a backend that is idle in transaction, rootQuery is
  the last statement it ran, not a running one, so the recommended
  cancel_query had nothing to cancel. Roots now carry rootState and
  rootIdle (true for any idle* state, including plain idle with session-level locks), a missing query stays null, and the action for an
  idle root points at terminate_backend (which rolls the transaction back).