v0.7.2 - Nuxeo data source, Alfresco OAuth2/ticket, ACS 26.1, MCP OAuth

v0.7.2 — Added Nuxeo data source, Alfresco OAuth2/ticket, ACS 26.1, MCP OAuth, FastMCP 3.4.5, Langflow 1.11.2

Added

1. Nuxeo data source — backend (sources/nuxeo.py) + all 3 UIs (React/Vue/Angular
   NuxeoSourceForm) + REST/MCP (nuxeo_config); basic/token/oauth2 auth; real-time
   incremental sync via the Nuxeo audit stream over Kafka
   (incremental_updates/detectors/nuxeo_audit.py + nuxeo_detector.py).
2. Alfresco OAuth2 + ticket auth (sources/alfresco.py, 3-UI auth selector,
   alfresco_detector) for initial ingest AND real-time sync. Requires
   python-alfresco-api >= 1.2.1.
3. Nuxeo token auth self-fetches from username/password (like Alfresco ticket).
4. MCP transport authentication (MCP_TRANSPORT_AUTH, FastMCP JWTVerifier); *_config
   and paths params accept an object or a JSON string.
5. OAuth2 token-minting helper scripts — scripts/alfresco/, scripts/nuxeo/,
   scripts/mcp/ (ps1/bat/sh/py + READMEs), pointered from scripts/README.md.
6. examples/nuxeo-deployment/ — reference Nuxeo+Kafka compose.yaml + kafka.conf
   (built on aborroy/nuxeo-deployment, unofficial) + README.
7. Bundled Keycloak for Alfresco OAuth2 (docker/includes/keycloak.yaml + realm import).

Changed
8. Version -> 0.7.2 (flexible-graphrag + -mcp pyproject; React/Vue/Angular
package.json) + root README "New v0.7.2" note.
9. Alfresco Docker stack -> Community 26.1.0 (docker/includes/alfresco.yaml; Postgres
17.9, ActiveMQ 6.2.1 admin creds).
10. flexible-graphrag-mcp on FastMCP >=3.4.5,<4 (JWTVerifier); python-alfresco-api dep
-> >= 1.2.1.
11. Build backend setuptools -> hatchling (both pyproject). Caveat: hatchling editable
no longer shadows the bundled langchain -> host Langflow needs
PYTHONPATH= (Docker uses PYTHONPATH=/app).
12. Langflow -> 1.11.2 (host quickstart + Dockerfile.langflow); fastapi 0.141.1 (no
pin); PyJWT restore after install; docs uv flag --native-tls -> --system-certs.
13. Regenerated the 4 Langflow flows (embed fg 0.7.2 + langflow 1.11.2, nuxeo data
source); generate_flows.py now stamps the fg version (editable install reports null).
14. Docs — data sources 13 -> 14, auto-sync 9 -> 10, Nuxeo added to source
enumerations; refreshed index.md counts (15 graph / 4 RDF / 3 parsers).
NEW docs/DATA-SOURCES/README-alfresco.md (3 Alfresco auth methods + the
Keycloak/identity-service OAuth2 setup, client-creds vs user token, token
scripts), parallel to README-nuxeo.md. Nuxeo section + screenshot
(react-sources-nuxeo.png) in UI-TAB-SOURCES.md + an Auth line on the Alfresco
section. OVERVIEW.md links both guides.

Fixed
15. Real-time Alfresco sync on ActiveMQ 6.x — passcode= (was password=).
16. OAuth2 client-credentials grant_type=None from the UI -> default client_credentials.
17. Angular dark-mode Processing-tab checkbox visibility.
18. Pin qdrant-client >=1.16,<1.19 (1.19.0 moved IDF_EMBEDDING_MODELS, broke a fresh
install's incremental init).
19. Langflow jwt/PyJWT conflict — nuxeo[oauth2] pulls GehirnInc jwt that evicts the
PyJWT Langflow needs; documented the restore + a sources/nuxeo.py compat shim so all
3 Nuxeo auths work in Langflow flow mode.
20. Dockerfile + Dockerfile.langflow — copy README.md + force-included files (Dockerfile,
env-sample.txt) before the editable install (hatchling validates readme + force-include).
21. docker-env-sample.txt — corrected RDF store service names for Docker
(jena-fuseki:3030, ontotext-graphdb:7200; Oxigraph already correct).
22. .gitattributes — .bat/.cmd = CRLF, *.sh = LF.