v0.1.0-rc.1

What's Changed

• mobile: keep the PeerID when unenrolling by @kaisoz in #429
• node: reap the stdio bridge backend after killing it by @aojea in #431
• Security triage: mcp 2.x, LangChain 1.x, Go floor, verified-token audience, npm lockfiles by @aojea in #432
• Close latent hole in service re-declare path by @IbrahimAhmed8 in #428
• node: authenticate each router once, not once per advertised address by @aojea in #433
• node: wait for the DHT routing table before advertising by @aojea in #435
• Testnet observability: metrics, cold-path probe, health workflow by @aojea in #436

Full Changelog: v0.1.0-rc.0...v0.1.0-rc.1