v0.7.3

Fixes

• Provider/engine errors are now sanitized: upstream response bodies, HTTP reason strings, and exception texts (which could embed credentials) no longer reach CLI/MCP output.
• Zhipu Web Search / Chat Search now treat an HTTP 200 error envelope as a provider failure instead of an empty success.
• Zhipu Web Search reports an explicit error when the response lacks a search_result array.

Docs & metadata

• plugin.yaml now lists all runtime and provider environment variables.
• Fixed the DeepSeek registry description (Anthropic Messages API web search).
• Bundled Agent Skill gained the full provider list with credential env vars and installation commands.

Release safety

• Publish workflow now verifies the release targets main and the tag is contained in origin/main history.

Testing

• 175 tests passed; added error-sanitization, Zhipu envelope, extension-metadata, Skill-contract, and release-guard regression tests.