v0.1.0

v0.1.0 — initial release

First public release of Kenning PG MCP: a PostgreSQL MCP server with
hard-pinned dependencies and database-enforced read-only access.

• Built on the MCP Python SDK v2.0.0 (2026-07-28 stateless protocol),
  psycopg 3.3.4, pydantic-settings 2.14.2 — exact == pins with a committed
  uv.lock (resolved 2026-08-03).
• Read-only enforcement is transaction- and role-based; every user statement
  runs through the extended query protocol so PostgreSQL itself rejects
  statement stacking. No SQL text is ever parsed for access control.
• Startup probe verifies writes genuinely fail inside read-only transactions
  and aborts the process otherwise.
• stdio and streamable HTTP transports from one handler set; fetch-side
  result capping with machine-readable truncation notices; honest type
  serialization (numeric as string, bytea as base64 with length).
• Three-layer test suite — unit, real-PostgreSQL integration, and an
  adversarial gauntlet run as a low-privilege role, in which every
  write-bypass attempt must fail at the database.
• Multi-stage Docker image (uv sync --frozen, non-root) as the primary
  distribution artifact.