v0.4.1: tool-example fixes, query_shard_exception classification, template hardening

tool-example fixes, query_shard_exception classification, template hardening

Corrects two search-tool examples and reclassifies an unmapped-sort 500 as
non-retryable; adopts mcp-ts-core ^0.10.14 template hardening.

Fixed:

• openfda_search_drug_approvals: sponsor_name example corrected to
  "PFIZER" (the field is stored uppercase). (#20)
• openfda_search_adverse_events: sort describe now names the sortable
  date field per category (drug/food/device). (#23)
• Unmapped-sort 500s (query_shard_exception) now reclassified to a
  non-retryable query_error instead of retrying a query that can never
  succeed. (#23)

Changed:

• Dockerfile: base image pinned to bun 1.3.14; build stage installs
  with --ignore-scripts.
• bunfig.toml: minimumReleaseAge supply-chain guard (3-day hold),
  @cyanheads/mcp-ts-core excluded as first-party.
• New: .github/SECURITY.md, .github/FUNDING.yml, .gitattributes.

Dependency bumps:

• @cyanheads/mcp-ts-core ^0.10.10 → ^0.10.14
• @biomejs/biome ^2.5.2 → ^2.5.3
• @types/node ^26.1.0 → ^26.1.1
• @vitest/coverage-istanbul ^4.1.9 → ^4.1.10
• tsc-alias ^1.8.17 → ^1.9.0
• vitest ^4.1.9 → ^4.1.10

335 tests pass; bun run devcheck clean.

CHANGELOG v0.4.1