v2.0.0

What's Changed

• Establish destructive-operation gating policy + API coverage doc (1.3.0) by @ax-jkikta in #112
• #111: single-device update_device + action-set delete tools (1.3.0) by @ax-jkikta in #114
• delete_action_sets_bulk: use native atomic endpoint (1.3.0) by @ax-jkikta in #115
• #113: test & documentation integrity catch-up (CI count guard + smoke backfill) by @ax-jkikta in #116
• Guard discover_capabilities catalog + add project CLAUDE.md by @ax-jkikta in #117
• Deterministic pre-push gate (ruff/mypy/pytest backstop) by @ax-jkikta in #118
• Triage bandit findings + promote to gate (pre-push + CI) by @ax-jkikta in #119
• CI/CD: post-publish verification + scheduled dependency audit by @ax-jkikta in #120
• CLAUDE.md: document the release approval gate by @ax-jkikta in #121
• release.yml: atomic asset attach (immutable-safe) — implements #110 by @ax-jkikta in #122
• Add gated delete_device + unify gate-flag naming (AUTOMOX_MCP_ALLOW_<TOOL_NAME>) by @ax-jkikta in #124
• Close #106: working CSV upload + gated local installer upload by @ax-jkikta in #125
• CHANGELOG: upload_policy_file contract verified live (#106) by @ax-jkikta in #126
• docs: fold #106 uploads into 1.3.0 CHANGELOG + stdio-only note by @ax-jkikta in #127
• Close #128: add list_webhook_deliveries + assert 100%-except-secrets coverage by @ax-jkikta in #129
• Release 2.0.0 — major bump for breaking gating-flag changes by @ax-jkikta in #130

Full Changelog: v1.2.1...v2.0.0