v3.13.0 — Claude hook recovery and guard repairs

Repairs Claude function-hook recovery and error reporting, and releases the optional Claude/Kindex integration.

• Hooks recheck current owner state instead of retaining startup conflicts. Confirmed disablement is neutral; repaired owners recover without a new registration. Active tool evaluation failures still fail closed.
• Recovery prompts remain available, with an explicit warning when sanitation is unavailable.
• Sanitized policy refusals and command errors reach the agent instead of being replaced by tool_result_unavailable; failed commands are not retried.
• Binary self-protection checks executable references rather than any occurrence of the repository name. Follow-up review corrections protect ordinary wrapper invocations and the running owner executable at custom or renamed install paths.
• Includes rmcp 2 compatibility and PR #15’s exact Claude 2.1.274/2.1.280 qualification and independent installer tests.
• Aligns Cargo, Claude plugin, Kindex, and MCP metadata at 3.13.0. The separate policy change in PR #16 is excluded.

Validation: 259 Rust tests in each feature configuration, 56 recovery cases, 8 host-error cases, package/publish dry run, plugin validation, and isolated real-host probes on both accepted Claude builds with a synthetic provider. These probes do not attest existing sessions or a production provider.

Upgrade the binary and reinstall its embedded optional adapter together; pairing revision is claude-functions-2.1.280-v1. Installing a package does not activate the optional adapter.

See the incident report in docs/incidents/2026-09-24-claude-adapter-lockout.md for the diagnosis and evidence boundaries.

Released from 53aa4acbe3cdbae965aab32bfdd04bfa703bf99b after Linux and macOS CI passed on that exact final-main commit: https://github.com/wandercom/signet-eval/actions/runs/36034011996

Merged PRs: #15, #19, and #20.