v2.3.7 - Godot workflow audit baseline

GoPeak v2.3.7

Changed

• Documents the trusted Godot 4 migration-safe workflow policy across package-facing docs.
• Adds the MCP resources, prompts, and dynamic exposure audit artifact for the next native-correctness cleanup lane.

Fixed

• Refreshes production dependency lock metadata so the production npm audit --omit=dev CI gate passes.

Verification

• npm audit --omit=dev
• npm run typecheck
• npm run test:ci
• npm run test:docs
• npm run test:metadata
• npm run test:packaging