Helm 2026.9.18

What's Changed

• ci: add zizmor Actions security lint — DRAFT, held for Tim's GO (audit CI-5) by @collectrix in #249
• test(oauth-pkce): poll-until-deadline wait with generous 15s ceiling by @collectrix in #272
• feat(registry): Official MCP Registry local packages[] entry for helmd (HELM-REGISTRY-LIST-1) by @collectrix in #270
• core-verify: chain-of-receipts pack manifest for the five CORE-VERIFY chains (CORE-VERIFY-PACK-1) by @collectrix in #273

Full Changelog: 2026.9.13...2026.9.18