Lure v1.14.1

Lure v1.14.1

A small patch to the MCP server allowlist.

When lure.yaml has an MCP allowlist (mcp:), the sandbox gateway allows only the model API host and the approved servers the profile uses. A profile's agent.allow is then ignored. lure audit and lure sandbox run now print a warning when a profile sets it:

Warning:   agent.allow (extra.example:443) is ignored: lure.yaml has an MCP allowlist (mcp:), so the sandbox gateway allows only the model host and the approved servers the profile uses. Approve the hosts in mcp.approved_servers, or remove agent.allow

audit.json lists the warning under warnings. A warning is never a finding: it does not block a run or change a recommendation.