v0.27.2

What's Changed

• Update github/codeql-action digest to 68bde55 by @renovate[bot] in #5236
• Update anthropics/claude-code-action digest to 476e359 by @renovate[bot] in #5235
• Forward MCPServerEntry headerForward to vMCP outbound requests by @ChrisJBurns in #5239
• Tolerate spec-violating list methods on backend init by @tgrunnagle in #5232
• Bump github.com/in-toto/in-toto-golang from 0.9.0 to 0.11.0 by @dependabot[bot] in #5234
• Use corev1.PullPolicy instead of string for EmbeddingServer ImagePullPolicy by @Sanskarzz in #5240
• Namespace operator.* Helm helpers to prevent umbrella chart collisions by @wucm667 in #5245
• Recognize mcp-go authorization-required sentinels as auth by @lorr1 in #5225
• Delegate tokenexchange HTTP plumbing to pkg/oauthproto by @jhrozek in #5226
• Bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 by @dependabot[bot] in #5249
• Move tokenexchange under pkg/oauthproto by @jhrozek in #5251
• Apply OTEL config to workloads created via API by @reyortiz3 in #5254
• Fall back across Docker sockets on connect failure by @samuv in #5246
• fix(registry): surface legacy registry format as a structured API error by @peppescg in #5260
• Allow operators to inject baseline scopes into DCR registrations by @jhrozek in #5233
• Collapse registry provider error ladder into a helper by @rdimitrov in #5261
• Update module github.com/stacklok/toolhive-catalog to v0.20260511.0 by @renovate[bot] in #5227
• Update goreleaser/goreleaser-action digest to 1a80836 by @renovate[bot] in #5054
• Release v0.27.2 by @toolhive-release-app[bot] in #5263

Full Changelog: v0.27.1...v0.27.2