v2.3.0

What's Changed

• fix: use the OS keychain in compiled binaries for new installs by @Minitour in #283
• feat(web): add Refresh all to registry settings by @Minitour in #284
• feat(web): add and remove providers from the project page by @Minitour in #285
• fix: record Claude skills, sub-agents and MCP calls in agent activity by @Minitour in #288
• feat(antigravity): register MCP and install hooks by @Minitour in #287
• fix(registries): restore Claude Plugins listing and Cursor root-path plugins by @Minitour in #289
• chore: open Dependabot PRs against develop by @Minitour in #290
• feat: consume Agent Plugins (agent-plugins.org) packages by @Minitour in #286
• Install skills and plugins from any git host by @Minitour in #279
• chore(deps): bump github/codeql-action from 4.38.0 to 4.38.2 by @dependabot[bot] in #281
• chore(deps): bump qltysh/qlty-action from 2.3.0 to 2.4.0 by @dependabot[bot] in #278
• refactor: in-process registry lock (release review round 6) by @Minitour in #297
• fix: release review round 5 by @Minitour in #296
• fix: release review round 4 by @Minitour in #295
• fix: release review round 3 by @Minitour in #294
• fix: release review round 2 by @Minitour in #293
• fix: address review findings on the v2.3.0 release by @Minitour in #292
• fix: accept Agent Plugins servers in the capabilities schema by @Minitour in #298
• feat(cli): add capa open [path] to open a project in the Web UI by @Minitour in #302
• fix(server): drop API Origin match so reverse-proxied dashboards work by @Minitour in #301
• Release v2.3.0 by @Minitour in #291

Full Changelog: v2.2.4...v2.3.0