Kozou v1.13.0

What's Changed

• refactor(core,api): extract JWT verification into @kozou/core/auth by @takashi-matsuyama in #208
• feat(mcp): OAuth 2.1 resource-server mode for the Streamable HTTP transport by @takashi-matsuyama in #209
• fix(mcp): enforce the OAuth execution role allowlist at the package layer by @takashi-matsuyama in #210
• test(mcp): real-Keycloak end-to-end suite for the OAuth resource-server mode by @takashi-matsuyama in #211
• docs(readme): point at the kozou.org remote-MCP OAuth guides by @takashi-matsuyama in #213
• release: v1.13.0 — remote MCP with OAuth (resource-server mode) by @takashi-matsuyama in #214

Full Changelog: v1.12.4...v1.13.0