MCP DevBridge v0.8.8

Highlights

Removes the hidden global/current-workspace routing dependency. Independent MCP conversations can hold explicit C:/D: workspace handles without cross-session drift.
Makes system/full_system a true system-access mode: the workspace is the default context rather than the filesystem boundary, while restricted modes keep canonical containment.
Adds a Windows high-integrity broker using one explicit UAC authorization plus a RunLevel Highest scheduled task; later full-system commands do not prompt per command. UAC is not disabled or bypassed.
Hardens privilege downgrade, broker startup/stop concurrency, path routing precedence, credential handling, output bounds and negative security paths.
Reduces routing/status overhead with a short active-root snapshot, O(1) workspace-root lookup and coalesced elevated-status IPC.

Python: 377 passed, 3 skipped; Ruff pass; Windows/Linux Pyright 0 errors / 0 warnings.
CodexPro: build + complete smoke pass; system-access smoke pass; production npm audit reports 0 vulnerabilities.
Windows and Ubuntu 22.04 release jobs passed from source commit c2e23508f0960e0f9201ad92b5fc4e94b1cfbe6d.

See docs/en/CHANGELOG.md and 项目架构.md for details.