v1.68.3

What's Changed

• fix(cloak): let env-guard's own remedy through when piped or redirected by @Ar9av in #779
• feat(mcp-gateway): per-server tool selection (tools.allow/deny) for hosted endpoint tool picks and new-tools-off by @Ar9av in #780

Full Changelog: v1.68.2...v1.68.3