v2.0.1

Changelog

• Corrected Compose project identity resolution so demo workloads use the current workspace UUIDv4 and cannot silently reuse a stale or shared scope.
• Improved authenticated Gateway-only query/runtime correctness, bounded backend queries, safer response projection, and runtime-specific image/version selection across rollback.
• Hardened credentials, volume identity checks, storage diagnostics, MCP version plumbing, release/docs/runtime contracts, and supply-chain coverage.

Measured highlights

• Collector batch benchmark: 5s timeout ~3.7–4.9s export latency; 1s timeout ~0.4–0.9s.
• Telemetry payload: 1328B → 185B.
• Shell-call budgets: setup 15 → 2, doctor 27 → 4, storage jq 11 → 3.
• Grafana base updated to official Grafana 13.1.3 digest; current pinned Trivy scan reports zero CRITICAL findings.

Validation

• Local CI parity: 14/14 passed.
• Gateway and MCP Docker-pinned go test -race ./...: passed.
• Runtime identity, concurrency, credentials, install, rollback, reset, and project-identity tests: passed.
• Live integration and authenticated three-backend correlation passed, including stored error trace and partial-backend behavior.