v2.8.1: content-output parity + mcp-ts-core 0.10.14 maintenance

content-output parity + mcp-ts-core 0.10.14 maintenance

search_studies, get_field_values, and find_eligible content[] renders now match structuredContent; find_eligible echoes reproducible upstream queries.

Changed:

• Supply-chain install guard — bunfig minimumReleaseAge (3-day hold, mcp-ts-core excluded) + Socket scanner for bun install
• Dockerfile pins oven/bun:1.3.14, adds --ignore-scripts to the build stage, and BuildKit cache mounts to all installs
• .gitattributes + SECURITY.md added; LICENSE year → 2026; prepare drops husky for a direct core.hooksPath

Fixed:

• search_studies explicit-field long values now reach content[] intact instead of clipped (#89)
• get_field_values renders every fetched topValues entry, not just the first 15 (#90)
• find_eligible: content[] no longer caps interventions/locations/contacts or clips briefSummary; searchCriteria now echoes the exact upstream query strings for reproducible replay past maxResults (#91)

Dependency bumps:

• @cyanheads/mcp-ts-core ^0.10.10 → ^0.10.14
• @biomejs/biome ^2.5.0 → ^2.5.3 (dev)
• @types/node 26.0.1 → 26.1.1 (dev)
• @vitest/coverage-istanbul ^4.1.9 → ^4.1.10 (dev)
• fast-check ^4.8.0 → ^4.9.0 (dev)
• tsc-alias ^1.8.17 → ^1.9.0 (dev)
• typedoc ^0.28.19 → ^0.28.20 (dev)
• vite ^8.0.16 → ^8.1.4 (dev)
• vitest ^4.1.9 → ^4.1.10 (dev)
• @socketsecurity/bun-security-scanner ^1.1.2 added (dev)
• husky ^9.1.7 removed (dev)

568 tests pass; bun run devcheck clean.

CHANGELOG v2.8.1