Ships this session's merged work: $in/$nin numeric cast, SSRF DNS-rebinding pin
+ IPv6 hardening + avif, field-scoped blockedAttributes, image-aware cache key,
single-pass searchWithExplain + shared retrieval core, short-TTL project cache.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>