v0.48.0

What's New

• Classified build-failure signals — When a Docker build fails due to Git authentication issues (private repo without credentials), moor now returns a structured source_credential_required code instead of a generic 500. Agents that skip authentication checks can branch on this signal and recover without parsing error text.

Improvements

• Structured errors in the MCP layer — moor_rebuild and moor_deploy now surface authentication-classified errors as structuredContent with code and message fields, allowing agents to act on the failure type rather than throwing.
• Documentation for private repos — Added comprehensive self-hosting guide covering the source-credentials flow: creating and rotating GitHub personal access tokens, the _check → deploy recipe, env vars, DNS, post-deploy confirmation, and recovery procedures.
• Clearer URL validation docs — Documented that the build path enforces github.com only; clarified that this constraint applies at build time, not at credential creation time.