FigOps 0.18.0

Added

• Add authentic journal visual-language metadata for Nature, Science, ACS, RSC, Elsevier, Wiley, and Cell tracks, including package-resource access and same-dataset comparison fixtures.

Changed

• Make release verification reproducible with locked Ruff, strict Windows containment coverage, immutable GitHub Actions, and fresh-package consumer checks.
• Pin and lock CI, package builds, TestPyPI/PyPI promotion, and dependency auditing.
• Refresh CLI, MCP, runtime, provenance, and Python-only workflow contracts.

Fixed

• Reject reserved environment overrides, output traversal, corrupt artifacts, unbounded process output, and ineffective timeouts.
• Harden MCP framing, runtime boundaries, secret redaction, input provenance, failure recording, and cross-platform CI behavior.

Verification

• Main CI passed on macOS and Windows, including Ruff and dependency audit gates.
• Local regression: 1271 passed, 30 skipped, 84 subtests passed.
• TestPyPI 0.18.0 publish and fresh install smoke passed.
• PyPI 0.18.0 publish and public wheel CLI/MCP/scaffold smoke passed.
• Attached wheel and source distribution are the verified artifacts from the PyPI publish workflow.