v0.3.26

Security fix for the MCP server path validation introduced in 0.3.25. The previous fix for #170 used the graph file's own parent directory as the validation base, which meant any path would pass validation against itself. The MCP server now checks that the path exists and ends in .json instead. Upgrade with pip install --upgrade graphifyy