v0.2.4

Added

• Official MCP Registry publishing. A server.json describes the
  dead-letter-mcp server, and a publish-mcp job in the release workflow
  publishes it to registry.modelcontextprotocol.io after each PyPI release
  using GitHub OIDC (no stored secret). The listing propagates automatically
  to the GitHub MCP Registry, PulseMCP, and other aggregators. Ownership is
  verified by an mcp-name marker in the package README; the first successful
  publish lands on the next release (0.2.3 on PyPI predates the marker). See
  the publishing runbook.
• AGENTS.md — operational guide for AI coding agents contributing to the
  repo: verification commands, hard invariants (untrusted email content,
  version sync points, release-pointer ordering), and conventions.

Changed

• Plugin distribution: the
  BigCactusLabs/bigcactuslabs-plugins
  marketplace now tracks a fast-forward-only release branch in this repo
  instead of a per-version tag pin, so shipping a plugin release no longer
  requires a hand-edited marketplace ref bump. Runtime versioning is
  unchanged — the plugin's .mcp.json still pins an exact PyPI version.
  plugin-vX.Y.Z tags continue to mark each plugin release. See the updated
  release runbook. No action needed for
  installed plugins.

Fixed

• Backend jobs now attach report_path before exposing a terminal job status
  when reports are enabled, so polling cannot observe succeeded or failed
  with a still-pending report write.
• Front-originated HTML replies now report client_hint="front", prefer the
  outer blockquote.front-blockquote boundary over nested quote markers, and
  preserve arbitrary siblings after that Front quote as authored body content.
• Local UI API requests now reject untrusted Host headers before issuing CSRF
  tokens, closing a DNS-rebinding-style bypass against the local-only browser
  workflow.