v0.1.62

What's Changed

• Feat/mitre navigator by @taylorwalton in #837
• security: bump mysql to 8.0.46-debian (8.0.38 → latest 8.0.x patch) by @taylorcopilot in #839
• docs: add CLAUDE.md — repo orientation for AI assistants and contributors by @taylorcopilot in #840
• chore: drop 10 unused python deps + their orphan transitives by @taylorcopilot in #842
• chore: reconcile requirements.in with packages the code actually needs by @taylorcopilot in #843
• chore: tier 1 python dep upgrades — safe drop-ins within current majors by @taylorcopilot in #844
• chore: bump grpcio + grpcio-tools 1.59.0 → 1.80.0 by @taylorcopilot in #845
• chore: tier 2 python dep upgrades — medium-risk majors by @taylorcopilot in #848
• chore: pydantic 1 → 2 + sqlmodel + SQLAlchemy 1.4 → 2.0 (atomic) by @taylorcopilot in #849
• chore: pydantic 2 / SQLAlchemy 2 cleanup — eliminate deprecations by @taylorcopilot in #850
• fix: pin bcrypt<5 — passlib 1.7.4 incompatibility breaks login by @taylorcopilot in #851
• fix: 2FA setup paths — Pillow regression + clear TOTP key error (#838) by @taylorcopilot in #852
• fix: replace passlib with direct bcrypt — eliminate log noise by @taylorcopilot in #853
• chore: lift bcrypt<5 cap, enforce 72-byte password limit at API layer by @taylorcopilot in #854
• precommit-fixes by @taylorwalton in #855
• chore: address 5 CVEs flagged by pip-audit; document 5 residual accepted risks by @taylorcopilot in #856
• precommit-fixes by @taylorwalton in #857

Full Changelog: v0.1.61...v0.1.62