v0.3.1 — second security review pass

A patch release from the second adversarial review pass over the whole package, including the new 0.3.0 surface. Upgrading is strongly recommended — several fixes close common real-world redaction leaks:

Redaction: env-dump credential keys (POSTGRES_PASSWORD=, spring.datasource.password:) are now caught (the word-boundary anchor made suffix-keyword keys invisible); quoted multi-word secrets redact in full; AWS/EKS load-balancer hostnames and spec.externalName are masked under mask_external_ips; provider-shaped node names are masked in event messages and logs.

Approval integrity: trigger_cronjob and rollout_undo bind a content hash of the exact template the human approved (re-verified after approval); rollout_restart gains resourceVersion binding; approval burn-on-use is now atomic — one approval can never authorize two executions.

Correctness: janus-mcp --config X serve honors the flag (the config is the security policy); list_namespaces really applies its label selector; ReplicaSet listing paginates so rollback never picks the wrong revision; get_logs respects a lowered log_tail_max; every refusal class is audited.

Upgrade: uv tool upgrade janus-mcp-server (or pipx upgrade janus-mcp-server).

Full details: CHANGELOG.md · Website: https://janus-mcp.ns47.com