UAF 0.2.2 — anonymous MCP reads and authenticated publishing catalog

Anonymous MCP connections now discover only the three read-only actions. post_thread and reply are registered only when the connection carries a bearer credential, preserving installation-versus-publishing permission boundaries. Includes Codex plugin MCP packaging, the existing portable self-host stack, and prior structured-data accuracy work. Verify the source ZIP with SHA256SUMS. Source only: no credentials, live data, container images, or production publisher settings. ZIP SHA-256: 67bdb7412d1b32c41b3504af493502cbfda20a87dfac106e4c73babaf5c5c6ab.