Release v2.16.0

What's Changed

• feat(tools): show per-tool quality badges in the Tools tab by @chelojimenez in #2731
• timeout on evals by @ignaciojimenezr in #2789
• error msg when eval tools/list fails by @ignaciojimenezr in #2795
• mark evals as failed when setup fails by @ignaciojimenezr in #2797
• feat(evals): unify render checks into the prompt-test runner (per-turn pinned tool calls) by @chelojimenez in #2792
• stop keeping client secrets in browser storage by @ignaciojimenezr in #2758
• feat(evals): full eval suite/case editing via public API, CLI, and MCP by @chelojimenez in #2804
• Eval nits by @ignaciojimenezr in #2752
• feat(evals): configurable Generate — case count, per-bucket mix, vary user styles by @chelojimenez in #2807
• feat(chat-ui): recorded-trace waterfall (TraceTimeline) by @chelojimenez in #2806
• fix(xaa): render IdP header in a flat container, not a floating card by @Vu-John in #2800
• fix(xaa): keep ID-JAG lint rows inside the flow panel on narrow widths by @Vu-John in #2801
• fix(xaa): stop reconnect from wiping saved server OAuth config by @Vu-John in #2802
• fix(xaa): drop blue focus ring on flow steps, add issuer auto-discovery hint by @Vu-John in #2805
• test(xaa): isolate the xaaAuthzIssuer resync comparison by @Vu-John in #2812
• fix(xaa): show full saved OAuth config (clientId, scopes, secret flag, issuer) in Configure modal by @Vu-John in #2813
• docs(xaa): clearer welcome-screen instructions for newcomers by @Vu-John in #2814
• fix(inspector): cleaner OAuth client secret reveal UX by @ignaciojimenezr in #2756
• XAA/OAuth debugger UX nits: IdP discovery chips, tighter empty state, debugger-aware Add Server by @chelojimenez in #2818
• feat(cli): eval iterations + trace subcommands by @chelojimenez in #2821
• test(cli): make tools-call-ui stderr assertions tolerant of Node warnings by @chelojimenez in #2824
• ci: run tests in pinned Playwright container (~14m → ~7m) by @chelojimenez in #2825
• Gray out free models when out of credits by @ignaciojimenezr in #2820

Full Changelog: v2.15.0...v2.16.0