v2.7.2 — mcp-ts-core ^0.9.3 + MCPB bundle

v2.7.2 — mcp-ts-core ^0.9.3 + MCPB bundle

Maintenance release. Picks up @cyanheads/mcp-ts-core 0.9.2 + 0.9.3,
unpins fast-xml-parser per #55, and adopts the framework's MCPB
bundle scaffolding for one-click Claude Desktop install. No server
behavior changes.

Dependency bumps:

• @cyanheads/mcp-ts-core ^0.9.1 → ^0.9.3
• zod ^4.4.3 added as direct dep (0.9.2 peer-dep migration)
• fast-xml-parser ~5.7.3 → ^5.8.0 (closes #55)
• @vitest/coverage-istanbul, vitest ^4.1.6 → ^4.1.7

MCPB bundle: manifest.json (user_config for NCBI_API_KEY,
NCBI_ADMIN_EMAIL, UNPAYWALL_EMAIL), .mcpbignore, npm scripts
bundle / lint:packaging / list-skills / audit:refresh,
install badges (Claude Desktop / Cursor / VS Code) in README,
Bundling section in CLAUDE.md / AGENTS.md. MCPB is stdio-only;
HTTP and Docker deployments are unaffected.

fast-xml-parser: 5.8.0 marks the in-tree XMLValidator as
@deprecated in favor of a new sibling fast-xml-validator package.
The export still works, and both call sites strip <!DOCTYPE …>
before validation, so 5.8.0's tightened DOCTYPE entity validation
cannot reach us. Sibling not mature enough to migrate to. Biome
noDeprecatedImports suppressed at both import sites.

README badge layout: Framework badge spotlight row (cyan-300
67E8F9); remaining badges grouped across two rows; Docker
(ghcr.io) badge added. Install badges placed under badge block,
hosted callout moved below.

Project skills synced: field-test 2.4 → 2.5, maintenance 2.1 → 2.3,
polish-docs-meta 1.8 → 1.9, release-and-publish 2.2 → 2.4. Framework
scripts devcheck.ts updated; lint-packaging.ts + list-skills.ts
added.

623 tests pass (4 skipped); bun run devcheck clean.