cipp-v0.1.4

Fixed

• An agent could point this connector's local database at any file on the machine.
  The MCP server forwarded a db argument straight through to sync, and the store runs a
  migration that drops and rebuilds its tables. A tool call naming another application's SQLite
  file would therefore rewrite that file. The MCP surface now refuses arguments that name a
  filesystem location - by name, and by what the flag's own help text says it does, so a newly
  generated path flag is refused before anyone has to notice it. Nothing an agent could
  legitimately call changed.

• Credential handling hardened. The token exchange refused to run over plain HTTP (the
  request body carries the client secret); a vendor error message can no longer echo the secret
  back; an absurd expires_in no longer wraps into the past and re-mint on every call; an
  existing config file has its permissions repaired to owner-only instead of keeping whatever
  it had; and a token that cannot be written to disk is reused for the rest of the process
  rather than re-minted on every single request.

Changed

• Every source file now carries one project copyright line (Copyright 2026 Servosity Inc. and msp-skills contributors) instead of the ten different strings the fleet had accumulated; individual contributor credit moved to the repository NOTICE. Source headers only, no behaviour changed.