v0.1.13: filter/taxonomy corrections + mcp-ts-core ^0.10.14

filter/taxonomy corrections + mcp-ts-core ^0.10.14

Corrects filter fields and documented taxonomy across the search/list tools; framework and supply-chain maintenance.

Fixed:

• search_reports/search_disasters country filter now matches country.iso3 (any tagged country), not primary_country.iso3 (#8)
• list_sources text search now queries name + shortname, so acronym lookups resolve (#10)
• list_countries crisis filter now sends the ongoing status directly instead of the legacy alert/current alias (#11)
• Filter-value docs corrected across tool descriptions, README.md, and docs/design.md (#11)

Changed:

• list_sources.type and search_training.format tightened to z.enum over the real ReliefWeb taxonomy; invalid values now rejected (#11)
• Supply-chain hardening: Socket install scanner via bunfig.toml, pinned oven/bun:1.3.14 with --ignore-scripts + BuildKit cache, .github/SECURITY.md

Dependency bumps:

• @cyanheads/mcp-ts-core ^0.10.9 → ^0.10.14
• js-yaml (transitive) 3.14.2 → 3.15.0 — clears GHSA-h67p-54hq-rp68 (CVE-2026-53550)

162 tests pass; bun run devcheck clean.

CHANGELOG v0.1.13