chore(main): release mcp-1password 0.3.0

[github-actions]

🤖 I have created a release beep boop

0.3.0 (2026-05-20)

Features

• connect: support local 1Password Connect backend (2c9f0e1)
• script-runner: reload configured allowlists dynamically (3bced12)
• script-runner: support dynamic allowlist manifests (5f3c982)
• unrestricted-runner: require approval for free-form commands (cca70dc)

Bug Fixes

• audit: sanitize non-enumerable and symbol-keyed properties (8f21c6a)
• capabilities: report runtime-gated tools (bc79b4a)
• connect: harden secret reference parsing (0b051d3)
• connect: preserve document item categories (71c9dee)
• connect: support field title secret references (c324f46)
• connect: use public item delete API (410cc2f)
• error: normalize MCP error serialization (39a7977)
• errors: drop untrusted cause to prevent secret leakage (68d81b6)
• http: bypass Host check on wildcard binds without allowlist (f5912ef)
• http: validate Host header against listen address (b6e6863)
• op-runner: redact secret values case-insensitively (330bc60)
• review: address Connect and runner findings (47b92db)
• script-runner: harden secret env validation (0855fe3)
• script-runner: withhold missing-ack output without rejecting runs (29b9bc9)
• security: override vulnerable ip-address dependency (061a44c)
• security: override vulnerable transitive packages (8aff450)
• security: redact secret references case-insensitively (9dfdc66)
• security: require acknowledgement for approval bypass (1e922ff)
• security: share unrestricted approval manager defaults (5ed26cd)

Documentation

• add public contribution and security policy (41f1996)

---

This PR was generated with Release Please. See documentation.