v0.9.0

Stabilization and hardening

Crow 0.9.0 is a stabilization release: it closes security and robustness gaps found in a full audit, readying the project for 1.0.0.

Security

• File downloads now accept http(s) URLs only and are capped to their size limit while streaming.
• SECURITY.md now lists every consent-gated destructive tool and the secret-redaction guarantees.

Robustness

• Webhook execution and interaction callbacks retry transient failures (408, 429, 5xx) with exponential backoff.
• The gateway daemon logs state transitions, handles unhandled rejections, and exits cleanly for supervisor restarts.
• modify_member and modify_role reject empty updates instead of sending no-op requests.

Polish

• The MCP server advertises instructions describing the per-guild flow and consent model.
• New docs/gateway.md with a systemd example for running crow gateway persistently.

69 tools. Full notes in CHANGELOG.md.