v0.4.7: mcp-ts-core ^0.9.6 → ^0.9.13: HTTP hardening, session gate, quieter error logs, GET /mcp keywords

mcp-ts-core ^0.9.6 → ^0.9.13: HTTP hardening, session gate, quieter error logs, GET /mcp keywords

Adopts six framework releases (0.9.7–0.9.13) and adds manifest metadata.

Added:

• MCP_HTTP_MAX_BODY_BYTES — 413 guard on oversized HTTP request bodies (default 1 MiB)
• landing.requireAuth: false — public hosted catalog serves full tool/resource/prompt inventory
• GET /mcp keywords — package.json keywords surfaced on the HTTP status endpoint
• manifest.json — repository, homepage, license fields
• package.json keywords — bun, stdio, streamable-http

Changed:

• HTTP session-init gate — non-initialize requests without Mcp-Session-Id → HTTP 400
• Expected client error log levels — 401/403/400/404 use logger.warning, no stack traces

Dependency bumps:

• @cyanheads/mcp-ts-core ^0.9.6 → ^0.9.13
• @biomejs/biome ^2.4.15 → ^2.4.16

129 tests pass; bun run devcheck clean.