chore(master): release 0.3.0

[meigma-release]

🤖 I have created a release beep boop

0.3.0 (2026-09-11)

⚠ BREAKING CHANGES

• mcp: accept host implementation and logger options (#54)
• execution: Capability names whose top-level segment is a standard Starlark universe name, sum, json, or math now fail Build with ErrInvalidRegistration.

Features

• add bounded relevance-ranked search (#44) (f50f113)
• add capability contracts and catalog (#7) (830d70d)
• add MCP server adapter (#9) (5eb0b1f)
• add secure execution server (#8) (0f3044e)
• api: reduce first-touch server ceremony (#34) (715a716)
• authz: add Rego authorizer adapter (#14) (aac86bc)
• binding: support composite capability outputs (#37) (0c66e5e)
• binding: widen scalar capability inputs (#35) (004538c)
• diagnostics: echo safe model-derived error detail (#43) (4bbb367)
• diagnostics: expose opt-in handler failure messages (#59) (4b498a2)
• execution: add fixed compute stdlib (#46) (344b79b)
• mcp: accept host implementation and logger options (#54) (9d29a03)
• mcp: publish model authoring guidance (#19) (f1d3736)
• worker: add bounded protocol framing (#29) (ca0a490)
• worker: add worker process supervision (#30) (0dee26a)
• worker: bound intermediate native results (#36) (493d8fa)
• worker: require fresh-process execution (#31) (3b541fc)

Bug Fixes

• api: make capability signatures invocation-only (#20) (8b5302b)
• authz: distinguish invalid Rego decisions (#16) (057faa8)
• binding: reject oversized final-value allocations (#26) (e2b1e56)
• mcp: advertise exact output schemas (#21) (7c77a80)

---

This PR was generated with Release Please. See documentation.