quickbooks-v0.1.7

Fixed

• An agent could point this connector's local database at any file on the machine.
  The MCP server forwarded a db argument straight through to sync, and the store runs a
  migration that drops and rebuilds its tables. A tool call naming another application's SQLite
  file would therefore rewrite that file. The MCP surface now refuses arguments that name a
  filesystem location - by name, and by what the flag's own help text says it does, so a newly
  generated path flag is refused before anyone has to notice it. Nothing an agent could
  legitimately call changed.

• The novel-command acceptance tests failed on the calendar, not on a code change. Their
  seeded books used fixed 2026 dates while the commands under test read today's clock, so once
  the calendar passed the newest seeded due date every invoice looked overdue: the cash-forecast
  test saw 800 of overdue inflows instead of 500 and an entirely empty eight-week window, and the
  stale-invoice test saw a not-yet-due invoice join the collections list. The seeded dates are now
  whole-day offsets from the day the test runs, so the books hold the same shape on any future
  date and in any time zone. Test-only - no shipped behaviour changed; cash-forecast,
  invoices stale and the aging commands always forecast from the real current date. The tests
  are also stricter now that "today" is known: they assert the overdue split, the beyond-window
  amounts, the net inside the window, and which forward week each open item buckets into.

Changed

• Every source file now carries one project copyright line (Copyright 2026 Servosity Inc. and msp-skills contributors) instead of the ten different strings the fleet had accumulated; individual contributor credit moved to the repository NOTICE. Source headers only, no behaviour changed.