v0.73.0

What's Changed

• ci: bump GitHub Actions off the deprecated Node 20 runtime by @mabry1985 in #1392
• fix(security): secure defaults — gate /metrics + strip secrets from MCP env (launch-hardening B3) by @mabry1985 in #1395
• feat(web): Tools view — group plugin tools by plugin, split the General bucket by @mabry1985 in #1397
• feat(web): domain-first settings IA (ADR 0048) — all slices by @mabry1985 in #1393
• fix(security): Batch 1 backend hardening — SSRF guard, busy_timeout, const-time compare, HITL sweep, requires_pip, subagent select by @mabry1985 in #1398
• docs(changelog): backfill Unreleased entries for #1393 + #1397 by @mabry1985 in #1400
• fix(security): Batch 2 (1/2) — plugin public_paths auth-bypass, data-verifier eval sandbox, install off-loop by @mabry1985 in #1401
• fix(security): Batch 2 (2/2) — fail-safe plugin secret redaction (discovery-failure != empty) by @mabry1985 in #1403
• fix(web): requestForm reads the error body once (restores 401 prompt on uploads) by @mabry1985 in #1404
• feat(web): Tools view — group MCP tools by server by @mabry1985 in #1405
• feat(background): task_batch(run_in_background=True) + background concurrency cap by @mabry1985 in #1396
• fix(chat): isolate subagent token streams from the lead turn by @mabry1985 in #1394
• feat(web): live tool-card feed for background jobs (ADR 0050 Phase 3) by @mabry1985 in #1402
• fix: serialize ACP runtime registry + never evict an in-flight runtime by @mabry1985 in #1406
• fix(web): guard streaming against cross-context frames (#1394 follow-up) by @mabry1985 in #1399
• docs(dev): goal trust-gate token-model design note (for decision) by @mabry1985 in #1407
• feat(web): split Settings ▸ Knowledge into sub-sections + open first accordion by @mabry1985 in #1408
• fix(chat/a2a): Batch 4 finalization quick-wins — no answer truncation; A2A artifact replace-on-divergence by @mabry1985 in #1409
• fix(chat): serialize same-context A2A turns + no silent empty answer (Batch 4) by @mabry1985 in #1410
• refactor(subagents): de-protocol subagent prompts (answer natively) by @mabry1985 in #1411
• refactor(output): retire the <scratch_pad>/ structured-output parser by @mabry1985 in #1412
• fix(chat): merge cross-tab chat-store writes (no last-writer-wins clobber) by @mabry1985 in #1413
• docs(security): document the console localStorage bearer; recommend env-var config by @mabry1985 in #1414
• docs(changelog): record the launch-hardening + Batch 4 + background work by @mabry1985 in #1415

Full Changelog: v0.72.0...v0.73.0