This release is mostly about making the server easier to trust and easier to release.
- Corrects the Go module path and locks the documented 310-tool catalog with a regression test.
- Replaces repository-specific 1Password paths with caller-supplied reference variables.
- Updates the MCP SDK, patched dependencies, and the minimum Go toolchain.
- Adds repeatable CI checks, release builds for macOS and Linux, SHA-256 checksums, and a CycloneDX SBOM.
- Documents safe live-controller testing, beginning with a dedicated site and the read-only profile.
No live controller smoke test was run for this release. The new integration guide keeps that step separate from CI so real network data and credentials stay out of hosted logs.