Release candidate from main at 2d124114e: scoped scanner registry view (#1812),
per-server capture lock (#1813), OAuth refresh-response recovery (#1828),
retrieve_tools upstream filter (#1836), scanner/CLI/Web UI fixes (#1830).