- Release workflow waits, bounded to 10 minutes, for npm to serve the new
  version before submitting to the MCP Registry, which validates it exists
- package-lock.json version resynced; it had been stale at 0.1.0