v0.2.4

Changed

• The check that decides whether OPENGIST_URL points somewhere local — and
  therefore whether sending a credential over plain http is worth warning
  about — now uses the same host classifier as the other MCP servers in this
  family, in src/hosts.ts. The string comparison it replaces missed several
  spellings of the same address: http://[::ffff:127.0.0.1], which URL
  canonicalises to [::ffff:7f00:1] before any check sees it, and localhost.
  with its root label. It also treated 127.example.com as loopback, because it
  matched on the 127. prefix, and so stayed quiet about a plain-http URL to a
  public host.

Nothing else changes: this server has no tool that takes a URL, so there is no
request whose target a caller can choose.