v1.13.5

What's Changed

• test(mcp): add OAuth smoke test and dummy-server e2e coverage by @christso in #447
• docs(mcp): describe the built-in proxy, not npx mcp-remote by @christso in #448
• feat(cli): update skills safely by @christso in #450
• fix(marketplace): handle invalid registrations safely by @christso in #451

Full Changelog: v1.13.4...v1.13.5