dsh-mediacrawler v0.3.0

Security and lifecycle hardening

• Disable comments by default; collection now requires explicit comment opt-in.
• Redact MediaCrawler platform credentials including msToken, a_bogus, verifyFp, verifyUuid, webid, and X-Bogus.
• Rename exports as credential-redacted and explicitly report that PII is not anonymized and archives are not automatically safe to share.
• Add an incremental append-aware JSONL index and remove duplicate result scans.
• Add a 256 MiB default export limit, cancellation-safe workers, temporary-file cleanup, and cross-process export locking.
• Add confirmed single-run deletion and dry-run-first retention cleanup without deleting browser login profiles.
• Expand the MCP surface to 12 tools.

Verification

• 96 Python tests and Node Skill provider test
• Real MediaCrawler CLI contract and system Chrome probe
• Clean public Git install and real DSH Web + MCP startup
• Windows/Linux, Python 3.11/3.13, Node 22/24 CI