MCEC v3.0.8

What's Changed

• feat(safety): emergency stop (#135) + isolated session provisioning (#138) by @tig in #142
• feat(ci): Interactive Windows runner + real-windows CI lane (fixes #99) by @tig in #103
• Agent: launch an application as a gated action (fixes #126) by @tig in #133
• ci: fail the build on leftover merge conflict markers by @tig in #159
• ci(security): pin third-party actions to full commit SHAs (#162) by @tig in #172
• fix(security): unauthenticated remote crash — OOB read in telnet negotiation (#144) by @tig in #170
• fix(security): embedded commands bypass the Enabled gate (#145) by @tig in #174
• fix(security): use monotonic client id as SocketServer client-list key (#147) by @tig in #173
• fix(settings): never fail-to-start on a bad mcec.settings or junk registry value by @tig in #176
• ci(security): least-privilege GITHUB_TOKEN permissions for workflows (#163) by @tig in #181
• fix(agent): cap HTTP request body at 1 MB and bound worker fan-out (#151) by @tig in #177
• fix(record): transition auto-stopped recordings to a completed state (#157) by @tig in #178
• fix(security): cap command execute queue depth and bound embedded fan-out (#154) by @tig in #175
• fix(security): auto-updater verifies signature/publisher before running installer (#146) by @tig in #184
• fix(security): block forked PRs from the self-hosted interactive runner (#161) by @tig in #189
• fix(telemetry): scrub username-bearing paths from exception telemetry (#156) by @tig in #180
• fix(security): MCP HTTP door validates Host/Origin + optional bearer token (#143) by @tig in #179
• fix(security): fail the release if the installer isn't validly signed (#160) by @tig in #188
• fix(security): bound receive buffers to prevent memory-exhaustion DoS (#148) by @tig in #186
• fix(ci): prevent script injection via version/ref in privileged release step (#164) by @tig in #185
• docs: lead with MCEC (Model Context Environment Controller), home automation secondary by @tig in #171

Full Changelog: v3.0.7...v3.0.8