v2.2.0

Added

• /mcp CORS support. The in-process Streamable HTTP MCP endpoint now
  answers the browser CORS preflight OPTIONS and exposes Mcp-Session-Id on
  its responses, so a browser-based MCP client (like the MCP Inspector, served
  from its own localhost origin) can connect. Loopback on any port is allowed by
  default, alongside the served host:port and any operator --allowed-origin
  entries; the allowlist is shared with the transport's DNS-rebinding check so
  the two never drift.

What's Changed

• feat(mcp-http): answer CORS preflight on the /mcp endpoint by @obeone in #59

Full Changelog: v2.1.0...v2.2.0