v0.12.3

Added

• surface disabled site matches across web and MCP
• (cli) derive Reddit session from OAuth credentials
• (registry) enable Reddit OAuth session probe

Added

• (bench) add a real-network Adler vs Sherlock benchmark harness

Changed

• (docs) document web UI smoke checks and MCP top rank-ceiling semantics
• (docs) add a cross-surface filter contract for CLI, web/API, and MCP
• (ci) run Adler web unit tests alongside typecheck/build/smoke
• (core) update optional impersonate transport to wreq 6

Fixed

• (security) remove RustSec-flagged lru 0.13 from the impersonate dependency graph
• (web) clear stale per-site lookup state when refiltering a running scan