v5.48.1

What's Changed

• test(mcp): cover teardown & error paths — scheduler spawn-failure, MCP disconnect, telegram fromConfig (#247) by @griffinwork40 in #591
• security(mcp): gate project-local .mcp.json spawn behind opt-in consent (#571) by @griffinwork40 in #600
• fix(telegram): run agent turn detached so mid-turn elicitations don't deadlock the poller by @griffinwork40 in #602

Full Changelog: v5.48.0...v5.48.1