v0.9.0

What's Changed

• chore(deps): bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in #49
• chore(deps): bump actions/cache from 4 to 5 by @dependabot[bot] in #50
• chore(deps-dev): bump astro from 5.17.3 to 5.18.0 by @dependabot[bot] in #51
• chore(deps-dev): bump @types/node from 25.3.0 to 25.3.3 by @dependabot[bot] in #52
• chore(deps-dev): bump typescript-eslint from 8.56.0 to 8.56.1 by @dependabot[bot] in #53
• chore(deps): bump @modelcontextprotocol/sdk from 1.26.0 to 1.27.1 by @dependabot[bot] in #54
• feat: make annotation popup status-aware (#48) by @viv in #58
• feat: simplify MCP tool set to list/start/finish workflow by @viv in #60
• fix: resolve 3 high-severity npm audit vulnerabilities by @viv in #73
• fix: update express-rate-limit to resolve CI audit failure by @viv in #76
• chore(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in #77
• chore(deps-dev): bump eslint from 10.0.2 to 10.0.3 by @dependabot[bot] in #78
• chore(deps-dev): bump @eslint/js from 10.0.0 to 10.0.1 by @dependabot[bot] in #79
• chore(deps-dev): bump happy-dom from 20.7.0 to 20.8.3 by @dependabot[bot] in #80
• chore(deps-dev): bump @types/node from 25.3.3 to 25.3.5 by @dependabot[bot] in #81
• feat: inline diff preview for addressed annotations by @viv in #74

Full Changelog: v0.2.0...v0.9.0