v0.4.5

Security

• Reflected Identifier in Errors: validate_identifier no longer echoes a rejected table or database name in its error, which get_schema_info and get_table_sample returned to the client verbatim. The check now uses re.fullmatch, so a trailing newline no longer passes (#102).
• Log Line Forging: Tool names, arguments and errors are logged with repr() so CR/LF in caller-supplied values can't forge log lines. Full tracebacks are now logged at debug level (#102).

Documentation

• Added Autohand Code CLI setup instructions (#93).
• Removed the Smithery install option, since Smithery's MCP Proxy and managed identity shut down on October 31.