v0.9.1

What's Changed

• Restrict hosted signups without affecting existing users by @jgpruitt in #230
• Tighten me serve origin checks and MCP file-tool paths by @jgpruitt in #231
• server: deny space management to restricted api keys by @jgpruitt in #232
• server: restricted-key gate review follow-ups by @jgpruitt in #233
• build: freeze the lockfile for every bun install by @jgpruitt in #234
• auth: require the device code to be typed on /device by @jgpruitt in #235
• server: constant /ready body; cli: bump MCP SDK to 1.32 by @jgpruitt in #236
• ci: read-only workflow tokens; pass dispatch inputs via env by @jgpruitt in #239

Full Changelog: v0.9.0...v0.9.1