Patch release in lockstep with the cloud v1.0.15 Windows installer
bounded-update fix (versioned install dir, safe shim switch, isolated
timeout-bounded stale cleanup). OSS packages carry no source changes beyond
the version bump; daemon-standalone/vendor/mcp-server is re-synced from the
freshly built mcp-server so the vendored runtime bytes match the 1.0.15
version string (no stale vendor bytes).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>