v0.5.2

fix(security): guard FastMCP-core not-found reflection — unknown tool/resource/prompt names and malformed-request records no longer reach any caller-visible field or server log (Layers 1-3 + marker-based log scrub across source loggers + Rich handlers). Patch, no schema change. Research use only; not clinical decision support.