Message and tooling release.
- The additive-only gate's refusal message is now transport-aware: REST callers are told to send the hash in the X-Agent-Bridge-Confirm header, Abilities/MCP callers are told to send the confirm_hash input field. The gate's behavior is unchanged; only the wording a caller sees differs.
- New docker/ demo: a single self-contained image that boots WordPress with the plugin and the official MCP Adapter and answers anonymous MCP introspection, so directory-listing checks can verify the server starts and responds.
Full changes in CHANGELOG.md.