Release v3.1.0

What's Changed

• changesets: release Inspector, CLI, and SDK by @ignaciojimenezr in #4382
• Canonical project-scoped URLs: keep the active project in every project-owned route by @chelojimenez in #4376
• clients: agent surfaces can edit clients, in the product's own vocabulary by @chelojimenez in #4378
• fix(oauth): accept a 403 that carries a Bearer challenge in the debug probe by @olartgabo in #3876
• fix(apps): stop a malformed tool ui.resourceUri from crashing app detection by @olartgabo in #3926
• fix(evals): block incomplete widget steps before the mutation rejects them by @olartgabo in #4130
• connections: retry an unreachable authorization server instead of re-consenting by @olartgabo in #4079
• Fix client source maps resolving against the wrong build's artifacts by @olartgabo in #4362
• fix(chat): stop sending temperature to Claude models that reject it by @olartgabo in #4036
• Agent-emitted permalinks: every durable resource hands back the app URL that owns it by @chelojimenez in #4375
• Bound the RPC log buffers by bytes, and see the next main-process OOM coming by @olartgabo in #4340
• Serve only the sandbox from the sandbox hostname by @olartgabo in #4169
• fix(sdk): an OAuth error response is the server's auth failure, not an MCPJam 500 by @olartgabo in #4359
• Add toolListChanged and toolResult probe fields to mcpProfile by @ignaciojimenezr in #4328

Full Changelog: v3.0.0...v3.1.0