🛡️OpenMaskit 0.4.1

This release polishes the install flow and tightens scope handling around OAuth discovery.

Added

• Pre-install runtime check. The marketplace install modal now shows the command line that will run plus a runtime-presence badge — ✓ detected (with path), ⚠ not on PATH (with an install hint), or podman (substituted for docker) via container-runtime detection. The modal also opens for bare catalog entries (server-memory etc.) that previously installed in one click, so every install confirms what runs locally.
• RFC 6750 §3 scope parsing in WWW-Authenticate challenges, with RFC 6749 §3.3 token-grammar enforcement. OAuth discovery now combines protected-resource-metadata scopes_supported and the resource server's required scopes into a unified scopes: [{scope, required}] list; the install modal renders required scopes as locked-checked.
• BYO scope discovery fallback. When a catalog entry omits available_scopes, the BYO install modal runs live discovery against the resolved MCP URL so the user still sees a scope picker.

Full changelog: v0.4.0...v0.4.1