v2.5.0

What's Changed

• fix: mask a token minted under a CSRF header, and keep both cookies by @Ostico in #206
• feat: read messages back, bound reported headers, and let a script assert a session's outcome by @Ostico in #207
• fix: keep the test suite out of the real registry, and let a caller remove a collection by @Ostico in #208
• fix: stop blaming pacing for a handshake failure, and reconcile captureVariables warnings by @Ostico in #209
• fix: make a WebSocket ping interval writable, and stop taking form fields that are dropped by @Ostico in #210
• docs: claim what this server is better at, and name what it is not by @Ostico in #211
• perf: cut the tool surface by a quarter, and merge four tools into write_request by @Ostico in #212
• chore: release 2.5.0 by @Ostico in #213

Full Changelog: v2.4.0...v2.5.0