v2.2.0

What's Changed

• feat: declare outputSchema on the three compound tools (#176) by @ax-jkikta in #185
• feat: read-only triage MCP App on get_compliance_snapshot (#178) by @ax-jkikta in #186
• feat: maybe_format_markdown → ToolResult; outputSchema on report tools (#177) by @ax-jkikta in #187
• feat: write-flow MCP App — patch-approval review (#179) by @ax-jkikta in #188
• feat: write-flow MCP App — policy change + blast-radius review (#180) by @ax-jkikta in #189
• feat: write-flow MCP App — remediation-apply review (gated) (#181) by @ax-jkikta in #190
• feat: read-first MCP App — access certification (RBAC) review (#182) by @ax-jkikta in #191
• fix(security)+docs: redact list_zone_users; guard resource counts; correct #182 rationale by @ax-jkikta in #194
• docs: refine write-flow App CSP invariant (deny-all + higher bar to loosen) by @ax-jkikta in #195
• test+docs: ready smoke + docs for the MCP Apps arc by @ax-jkikta in #196
• test: fix smoke markdown test for the #177 ToolResult contract by @ax-jkikta in #197
• release: 2.2.0 — the MCP Apps release by @ax-jkikta in #198
• fix: remediation App offers patch-now only when it's the available remediation by @ax-jkikta in #199
• feat: remediation App lists target devices (expandable), not just a count by @ax-jkikta in #200
• feat: blast-radius App shows server-group names + expandable device list by @ax-jkikta in #201
• feat: triage App surfaces group/device names (shared bridge + live row shape) by @ax-jkikta in #202
• docs: propagate the #182 read-first rationale correction to two missed surfaces by @ax-jkikta in #203
• chore(deps): security + maintenance dependency bumps (fastmcp 3.4 AppConfig migration) by @ax-jkikta in #204
• docs(api-coverage): update ResourceCSP verification stamp to FastMCP 3.4.2 by @ax-jkikta in #205

Full Changelog: v2.1.0...v2.2.0