Adopts @cyanheads/mcp-ts-core ^0.7.0 → ^0.8.19 (19 intermediate releases,
all additive). No tool or resource handler changes — this is a maintenance
release focused on framework uptake, engines floor, and devcheck hardening.

Highlights:
- Engines bumped to node ≥24, bun ≥1.3; Dockerfile base oven/bun:1 → oven/bun:1.3.
- New `Framework Antipatterns` devcheck step (3 rules guarding against SDK-coupling
  shortcuts: inputSchema-downgrade, inputSchema-mutation, transport-text-match).
- Changelog frontmatter gains `security: boolean`; pairs with the `## Security`
  body section to render a `🛡️ Security` badge in the rollup index.
- 3 new skills synced from the framework (api-canvas, api-telemetry,
  tool-defs-analysis); 17 refreshed; mirrored to .claude/skills and .agents/skills.

Framework surface now available to adopt incrementally: declarative `errors[]`
contracts on tool/resource definitions with typed `ctx.fail(reason)` /
`ctx.recoveryFor(reason)`, `httpErrorFromResponse` and `partialResult`
utilities, three more error factories, `@cyanheads/mcp-ts-core/canvas` with
`spillover()`, telemetry dashboard scaffolding.

Also bumps @biomejs/biome ^2.4.13 → ^2.4.14, @types/node ^25.6.0 → ^25.6.2,
tsc-alias ^1.8.16 → ^1.8.17. README MCP SDK badge ^1.27.1 → ^1.29.0.