v0.1.2: Offline QR Verification and eSignet Improvements

[izzy-Ti]

Fayda MCP v0.1.2 adds offline QR credential verification, new inspection tools, and improvements to eSignet integration.

New tools
• list_allowed_checks
• list_verification_purposes
• check_service_health

Offline QR verification
• Decode Fayda V4 demographic QR payloads.
• Verify detached RS256 signatures using operator-approved public keys.
• Return minimal predicates without exposing demographics, face photos, or signature bytes.
• Keep holder_authenticated=false. QR verification authenticates signed credential data, not the person presenting it.

eSignet improvements
• Added PS256 and ES256 token validation.
• Updated client assertion headers and UserInfo validation.
• Added issuer trailing-slash handling.
• Improved Redis connection pooling and transient timeout retries.

Configuration
• Accept Fayda Developer Portal .env variable names.
• Decode base64 RSA JWK signing keys automatically.
• Support OIDC discovery with explicit overrides.

Security and packaging
• Replaced committed test private keys with in-memory key generation.
• Sanitized documentation and test fixtures.
• Updated release metadata and automated publishing for v0.1.2.
• Packaging checks passed.

Upgrade:
pip install --upgrade fayda-mcp

Still in development. Feedback and contributions are welcome.

---

This discussion was created from the release v0.1.2: Offline QR Verification and eSignet Improvements.