Release v0.19.1

What's Changed

• feat(cli): match MCP resource completions by name and discover servers by @wenshao in #5733
• chore(release): v0.19.0 by @qwen-code-ci-bot in #5739
• fix(cli): skip unusable A2UI configs by @tt-a1i in #5685
• fix(cli): avoid duplicate ACP write BOM by @tt-a1i in #5688
• fix(cli): enable /lsp in ACP mode by @tt-a1i in #5689
• fix(core): require integer inline media byte limit by @tt-a1i in #5671
• fix(cli): reject invalid session list cursors by @tt-a1i in #5709
• fix(cli): reject unsupported extension scopes by @tt-a1i in #5714
• fix(core): reject blank cron prompts by @tt-a1i in #5716
• fix(cli): validate channel credential types by @tt-a1i in #5718
• fix(cli): use high-contrast software cursor by @tt-a1i in #5720
• fix(core): require integer compaction counts by @tt-a1i in #5646
• fix(core): parse agent & workflow integer env vars strictly by @he-yufeng in #5679
• fix(serve): validate list maxEntries as a positive integer by @he-yufeng in #5719
• fix(workflows): validate runId before recursive prune delete (path-traversal dir wipe) by @LaZzyMan in #5740
• fix(triage): never auto-approve cross-repo refactor PRs by @wenshao in #5744
• fix(cli): only paint theme background when it matches the terminal by @wenshao in #5746
• revert(core): revert Protocol enum & model-identity decoupling (#5089) by @wenshao in #5745
• ci: retry merge-ref checkout to fix transient "not our ref" failures by @yiliang114 in #5732

Full Changelog: v0.19.0...v0.19.1