Release v1.21.0

1.21.0 (2026-06-22)

Features

• mcp: gate read-only console on the authoritative connect-status flag (23f9c10)
• mcp: give a clear read-only message when console exec is refused (616d6c1)