v0.4.0: Workflow identity, persistent drafts, confirmed deletes

Workflow identity, persistent drafts, confirmed deletes

• workflow_delete confirms the resolved target with the user before deleting, so a client without elicitation support can no longer delete; HTTP startup with MCP_SESSION_MODE=stateless now fails (#17)
• Temporary workflows are persistent drafts — workflow_delete now removes them, temp_not_allowed is gone, and workflow_create_temp reports created/overwritten (#18, #20)
• Workflow identity (version, name, filename) is canonicalized and hashed to fix cross-source key collisions, non-Latin names, slug-derived filename collisions, and stale lookups (#16, #19, #21, #26, #29, #33)
• workflow_list filters are trimmed and versions sort by full semver precedence, whitespace-only required fields are rejected, writes/deletes are serialized against concurrent races, emptied category directories are cleaned up, a lingering same-key file after delete is surfaced, and filesystem error messages never leak the absolute workflows path (#15, #22, #24, #28, #30, #31, #32)
• deps: @types/node 26.6.1 → 26.6.2, fast-check ^4.10.1 → ^4.10.2

CHANGELOG v0.4.0 · release PR #34