v14.0.0

• Preserve every valid explicitly captured HTTP-header and RPC-metadata name, including credential-like names and binary metadata names. Capture selection controls exposure; unrelated persistence rules remain unchanged.
• Remove the captured-field name and token deny tables from the generated public policy. Keep protocol name validation and rejection of bare template roots.