LoxBerry MCP Server 0.4.0-beta.4

• Add an optional fail-closed emergency-stop signal from a visible digital
  Loxone Virtual Status. It blocks MCP tool calls on 0 or an unknown signal
  state and publishes its retained MQTT status independently from health topics.

• Treat the service-enable switch as a saved boot setting: initialize it when
  the page loads and update it only after applying that setting, never from
  periodic service-status polling or separate Start/Stop/Restart actions. Disable
  those runtime actions while the saved service setting is off.

• Separate systemd runtime, MCP access and optional MQTT health configuration.
  MQTT health publishes retained Loxone-epoch heartbeat and systemd state topics

• MQTT health can optionally use a custom broker. Its password is stored in a
  separate encrypted credential store and is never displayed or logged.
  below the configurable mcpserver root without storing or displaying broker credentials.

• Harden Admin UI browser responses with no-store caching, CSP, frame, referrer
  and MIME protections across page, AJAX, download and redirect paths.

• Add Tool Explorer time-range shortcuts, in-tab reference selection, action-specific
  control fields, and collapsible advanced parameters.

• Generate a versioned HTML and JSON reference for the complete MCP tool
  contract during package builds, link it from Help and the Tool Explorer, and
  document tools/list as the authoritative installed tool surface.

• Restore date/time pickers for optional RFC-3339 tool parameters in the Tool Explorer.

• Update the bundled using-loxberry-mcp agent workflow to revision 24 with
  task-specific read paths, complete cache-operation authorization and
  uncertainty guidance, and fail-closed schema and parameter-source rules.