v0.4.33

What's Changed

• Fail closed on unlabeled DIFC responses by @lpcox in #14930
• Guard MCP prompt retrieval with DIFC by @lpcox in #14934
• Fix author-aware integrity labeling by @lpcox in #14935
• [log] Add debug logging to launcher connection pool by @github-actions[bot] in #14910
• Upgrade workflows to gh-aw v0.92.0 by @lpcox in #14941
• 🔄 chore: pin schema URL to gh-aw v0.91.12 by @github-actions[bot] in #14921

Full Changelog: v0.4.32...v0.4.33