Auto-review follow-ups for PR #219: fix(server): release only our own extension claim, and stop guessing scoped names

[github-actions]

Tracking auto-review follow-ups for #219 (verdict: warn).

🟡 Nits

• trust.ts clearPin's broad catch masks real filesystem errors (e.g. EACCES) as a misleading "no extension pin for X" for scoped server names, since the stem-lookup fallback never matches a slash-form name

---

When addressing the review on #219, resolve each item and add Closes #<this issue> to the PR once everything is genuinely fixed; deferred items stay open here. See the auto-review follow-up convention in CLAUDE.md.