v2.3.0

What's Changed

• chore: remove MCP server feature by @plosson in #39
• chore: remove scheduler and .run.md features (Phase 2) by @plosson in #41
• fix(auth): survive a missing browser and an unreachable redirect by @plosson in #32
• fix(site): restore gray-matter dependency used by the site build by @plosson in #42
• chore(daemon): remove native service install, Docker is the only runtime by @plosson in #43
• feat(vault): lock and unlock primitives for a long-lived daemon by @plosson in #44
• feat(daemon): start locked, drop the legacy API key and vault env by @plosson in #45
• fix(vault): let import create the vault on a fresh machine by @plosson in #47
• feat(daemon): admin UI with unlock, lock, and a read-only profile list by @plosson in #48
• refactor(auth): one refresh path with a per-profile mutex by @plosson in #49
• feat(daemon): delete and read-only toggle from the admin UI by @plosson in #50
• feat(keys): API keys and the composite token, from the UI and the CLI by @plosson in #51
• feat(daemon): /v1 credential API for remote agents, atomic vault writes by @plosson in #52
• feat(cli): remote mode, an agent machine with only AGENTIO_TOKEN by @plosson in #53
• chore(hub): run the suite in CI, cap requests per key, VPS runbook by @plosson in #54
• fix(ui): keep the session over plain HTTP on any host by @plosson in #55
• feat(ui): test credentials profile by profile, with progress by @plosson in #56
• feat(ui): tabbed admin UI with danger zone, key reveal dialog, grouped profiles by @plosson in #57
• feat(ui): sign out of the browser session by @plosson in #58
• feat: agentio login via a device-style approval flow by @plosson in #59
• refactor: share the hub transport, write guard and key fields after review by @plosson in #60
• fix: review follow-ups on the page, login, and the test write guard by @plosson in #61

Full Changelog: v2.2.2...v2.3.0