v1.3.0 — TLS auto-cert + bcrypt token migration

Changes

C6 — TLS self-signed cert generation

• install-hugo-mcp.sh now generates an EC P-256 self-signed cert (10yr, VM IP as SAN)
• uvicorn starts with --ssl-certfile/keyfile automatically

C2/C5 — bcrypt token migration

• After .env creation, runs token_mgr.py migrate to hash MCP_TOKEN into tokens.json with bcrypt cost-12

Template update

• hugo-mcp.service.tpl: uvicorn binds to 0.0.0.0 (gated by UFW/IPAddressAllow)