v0.2.11: search/get_item id fixes, mcp-ts-core ^0.10.14

search/get_item id fixes, mcp-ts-core ^0.10.14

Fixes the search→get_item id contract (#24, #26) and adopts mcp-ts-core ^0.10.14 with supply-chain install hardening.

Added:

• is_item field on libofcongress_search results — flags catalog items resolvable via libofcongress_get_item (#24)
• bunfig.toml supply-chain guard — minimumReleaseAge + Socket install scanner
• .github/SECURITY.md, .gitattributes

Changed:

• Docker base image pinned to bun:1.3.14/1.3.14-slim; build installs with --ignore-scripts
• Vendored skills/scripts re-synced to the framework

Dependency bumps:

• @cyanheads/mcp-ts-core ^0.10.9 → ^0.10.14
• @biomejs/biome ^2.5.0 → ^2.5.3
• @types/node ^26.0.0 → ^26.1.1
• ignore ^7.0.5 → ^7.0.6
• tsc-alias ^1.8.17 → ^1.9.0
• vitest ^4.1.9 → ^4.1.10
• @socketsecurity/bun-security-scanner ^1.1.2 (new)

Fixed:

• libofcongress_search id extraction preserves the full /item/ path for multi-segment newspaper ids (#24)
• libofcongress_get_item encodes multi-segment ids per path segment instead of flattening slashes to %2F (#24)
• libofcongress_get_item and the libofcongress://item/{item_id} resource normalize protocol-relative urls to https:// (#26)

161 tests pass; bun run devcheck clean.

CHANGELOG v0.2.11