v1.3.0-dev01

First dev pre-release toward v1.3.0. Grab this instead of dev-latest if you want to pin a specific build for bug reports.

Added

• Multiple independent workout sessions per day (#76, requested by @yoyo-san). Log a stretching routine and a lifting session on the same date as two fully independent workouts, switchable via a session tab strip. Also fixes a real data-loss bug: loading a second template over a completed workout used to silently delete the first one with no confirmation.
• Exercise browser display density toggle (#74, requested by @josefelixh). Compact/comfortable view switch on the Exercises tab (desktop widths), next to the category filter chips.
• MCP server for external AI clients (#78, requested by @bursaar). Speaks the Model Context Protocol at /api/mcp, off by default. See the MCP setup guide.
• Statistics: overlay a second body measurement on the Body Weight chart.

Fixed

• Settings → Statistics "Lock Y-Axis to Zero" label rendering in English in every translated locale.
• Reordering exercises silently reverting after the debounced save landed.
• Superset weight/reps inputs collapsing to 0px wide on phone (#75, diagnosed by @backmind).
• Body Stats widget/sheet showing "not logged" for records that exist on the server (#80, diagnosed by @josefelixh).

Full details in the CHANGELOG.

Security

• Bumped fast-uri, @xmldom/xmldom, and browserslist (root) plus qs (server) for open Dependabot alerts, via a non-forcing npm audit fix within already-permitted lockfile ranges. npm audit reports 0 vulnerabilities on both root and server. (GitHub's Dependabot alert count on the repo still reflects main, which gets this fix on the next main release.)