MCP DevBridge v0.7.2

Default asynchronous command tasks + multi-session hotfix + orchestration watchdog.

• bash has no public timeout_ms; every command immediately returns task_id and runs until natural exit or cancel_task.
• Removed separate start_task; lifecycle uses get_task, wait_task, list_tasks, and cancel_task.
• Fixed v0.7.1 live bug: BashTaskManager is process-scoped instead of MCP-server/session-scoped, while task lookup remains workspace-scoped.
• Added cross-HTTP-session regression: session A starts a task, session B can wait on the same task id.
• wait_task is capped at 60 seconds per poll and terminal tasks return immediately.
• Added 600-second orchestration watchdog: no task observation for 600 seconds marks the next snapshot orchestrationStale=true with resumeHint; the watchdog never kills or changes the task.
• Bounded rolling output, full process-tree cancellation, existing PathGuard/bash-session/safety policies preserved.

Verification: TypeScript build, full npm run smoke, npm run stress, 304 pytest tests, Ruff, Pyright, lock/diff checks all green. Frozen staging smoke and detached-upgrade dry-run passed.

Installer SHA-256: 09f6e87f699fdc806404a961846cf78d1ece1fbdcaff80d3a6b4a1243c577510