v2.2.0

What's Changed

• Verify the npm-installed binary and pin the release workflow's actions by @jakezwang in #69
• Let operators restrict MCP tools; declare tool behaviour and the real version by @jakezwang in #70
• Bound checkout memory by the largest collection; read history summaries from the index by @jakezwang in #71
• ci: bump the actions group across 1 directory with 3 updates by @dependabot[bot] in #72
• Prepare 2.2.0: MCP tool restrictions, verified npm install, lighter reads by @jakezwang in #73

New Contributors

• @dependabot[bot] made their first contribution in #72

Full Changelog: v2.1.6...v2.2.0