v0.9.1

What's new in v0.9.1

Changed

• In a container or CI job, the startup ping sends a container or ci label
  instead of an install ID. Those usually start from a clean home directory,
  so the ID was new on every run.

Security

• The lockfile, which the Docker image and the .mcpb bundle are built from,
  takes hono 4.13.13 (GHSA-5r4p-p66f-jhc7) and ip-address 10.7.4
  (GHSA-rxp7-6hxx-x8q5). Both come in through the MCP SDK's HTTP server and
  auth code, which the stdio server never loads. A fresh npm install already
  resolved fixed versions.