v1.0.1

Bug Fixes

• security: reject client writes to git's control surface (GHSA-c598-5pxh-5vq3)

Closes the critical advisory GHSA-c598-5pxh-5vq3. With writes_enabled: true, a client could plant a repo-local git content-filter driver via write_file (.git/config plus .gitattributes) and trigger it through the read-only git_diff, gaining arbitrary command execution as the server user and escaping working_directory.

Every mutating filesystem tool now routes through resolveForWrite, which refuses any path with a .git segment or a .gitattributes basename at any depth. git's control surface is the server's to own, not the client's.