v0.8.0 - Store Asset Validator

What's New

• steam_validateStoreAsset - local store-art check against Valve slot sizes, PNG/JPEG headers, and library-hero heuristics. Failed checks return structured JSON (not a tool error).
• 26 public tools - 11 no-auth, 8 API-key, 7 publisher-key.
• Gated partner client - opt-in process for partner.steamgames.com image/trailer uploads. Not on the npm bin. dry_run by default; live calls require an explicit confirm. Cookie jars and Chromium profiles stay on disk via env paths, never in mcp.json.
• secrets-scan CI job plus a broader gitignore for cookie jars, Steam Guard files, and Playwright/Chromium profiles.

Changes since v0.7.0

• feat: add store asset validator and gated partner client (#18)
• fix: add NODE_AUTH_TOKEN to npm publish step (#10)
• fix: add stale.yml workflow (#8)
• fix: backfill DCO and inbound license grant section in CONTRIBUTING.md (#7)
• chore: standards-version stamps, drift-check pins, and GitHub Actions bumps (#1, #2, #3, #4, #5, #6, #9)