Highlights
- Adds explicit policy files and stable baseline suppression for CI adoption.
- Detects GitHub Copilot hooks and risky local MCP process configurations.
- Adds GitHub Action, pre-commit, uvx/pipx workflows, release automation, and expanded security documentation.
- Improves JSONC parsing and ships 25 regression tests.