0.14.3 — Internal cleanup

0.14.3 — Internal cleanup

This release removes a duplicated helper and an unused re-export. Scans, BOMs,
policy evaluation and the CLI do not change.

Highlights

• The plugin install walker reuses the component name helper. It kept its
  own copy of the scan-output name lookup. Both callers now use
  component_name_for on ComponentRef, which gives the same names.
• tools.component_ref no longer re-exports
  is_unpinned_mcp_package_launch. Nothing imported it from there. The
  helper stays in tools.identity, its only caller.

Install

uv tool install openaca==0.14.3 or pip install openaca==0.14.3.

Compatibility

Pre-V0 — no back-compatibility hedging.

• Nothing changes for a consumer. openaca.core does not change.
• openaca:schema_version stays 0.7. The BOM document shape did not
  change.
• The overlay record schema is unchanged.