v0.49.0

The single-key mutation verbs gain the key_ family stem, and the migrate orchestrator is removed.

Changed (breaking)

• mv → key_mv and delete → key_delete, renamed everywhere the token is load-bearing: the verb / MCP-tool id, the guard transition symbol, the manifest guard: transition key, and the audit-log verb string. The single-key verbs now share the key_ stem with their bulk cousins key_mv_prefix/key_delete_prefix; zone_mv is unchanged. The CLI is unchanged — key mv, key delete, key mv-prefix, key delete-prefix keep their spelling. Migration: manifests with guard: { mv: … } / guard: { delete: … } blocks must rename those keys to key_mv / key_delete; MCP clients pinned to the mv/delete tool ids must update; audit rows written before this release keep their mv/delete verb strings (readers must accept both).

Removed (breaking)

• The migrate verb (YAML-plan orchestrator). It was non-transactional and added a second input format for no capability the primitives lack — its zone_mv/key_mv_prefix/key_delete_prefix ops remain individually callable, each with --dry-run. Removed from the CLI and the MCP catalog.