Release v2.15.0

What's Changed

• [XAA Server Bar] PR-I1: plumb xaaAuthzIssuer + wire XAA route by @Vu-John in #2760
• [XAA Server Bar] PR-I2: XAAServerModal by @Vu-John in #2761
• [XAA Server Bar] PR-I3: global run settings + simulated identity by @Vu-John in #2774
• [XAA Server Bar] PR-I4: server-side confidential secret + token-endpoint resolution by @Vu-John in #2763
• [XAA Server Bar] PR-I5: XAAFlowTab reads the selected server; retire the singleton by @Vu-John in #2764
• [XAA Server Bar] PR-I6: active-target indicator + precedence UX + telemetry by @Vu-John in #2765
• [XAA Server Bar] PR-I7: XAA add-server saves without connecting + not-testable escape hatch + UI polish by @Vu-John in #2766
• [XAA Server Bar] PR-I8: never run a confidential server with an empty secret by @Vu-John in #2767
• [XAA Server Bar] PR-I9: stop password managers on XAA inputs + fix refresh-to-home bounce by @Vu-John in #2768
• [XAA Server Bar] PR-I10: run a confidential server target locally by @Vu-John in #2769
• [XAA Server Bar] PR-I11: keep "Configure Server to Test" input on a failed save by @Vu-John in #2770
• [XAA Server Bar] PR-I12: run-bar responsive layout + deduplicate configure CTA by @Vu-John in #2771
• [XAA] Apply edited simulated identity to the active run by @Vu-John in #2780
• [XAA] Slim the IdP panel into a single top bar by @Vu-John in #2781
• [XAA] Rewrite phase + step copy in the diagram's own words by @Vu-John in #2782
• [XAA] Slim the run bar: drop chip rail, split-button Run all, identity into modal by @Vu-John in #2784
• feat(harness): real Claude Code runtime behind harness: "claude-code" hosts by @chelojimenez in #2741
• Server groups in evals (rename from attachments) + picker fixes by @ignaciojimenezr in #2787
• fix(cli-auth): authorize mcpjam login against a dedicated Connect OAuth application by @chelojimenez in #2788

Full Changelog: v2.14.0...v2.15.0