Block a user
feat: repo_mirror_push tools (add/list/delete push mirrors)
fix: file_read should handle directory paths gracefully
feat: repo_tree tool (single-call directory tree)
feat: repo_update tool (archive, description, visibility, template flag)
auth: CallerMiddleware header priority order is undocumented
auth: no audit logging of authentication failures
auth: JWKS cache refresh interval is hardcoded at 1 hour
auth: no rate limiting on authentication failures
auth: silent JWT degradation when Dex is unreachable
brain MCP: accept static Bearer without OAuth challenge for LAN/Tailscale CLI clients
feat: post-create init workflow
feat: post-create init workflow