chore(master): release 0.9.1

[github-actions]

🤖 I have created a release beep boop

0.9.1 (2026-07-03)

Features

• stream run lifecycle events as ndjson via a run-listener (#159) (ccc99dc)
• support listing mcp suites from the sdk (#144) (6b68b42)

Bug Fixes

• broken gitleaks ci for fork (#158) (e0be561)
• bump zod to ^4.0.0 to satisfy claude-agent-sdk peer dependency (#148) (bcd970e)
• conditional reasoning instruction and stricter section() parsing (15b598f)
• declare mcp dep, add createRequire banner, fix atlas-data resolution for bundled runners (#134) (b8ff91f)
• harden mcp baseline scanner against false negatives and crashes (#155) (cd36f85)
• make agent judge reason before stating its verdict (3b551c6)
• make agent judge reason before stating its verdict (60dacc8)
• make hunt work from a published install (#157) (ac468ea)
• rename 'Risk Score' to 'Safety Score' in extension popup (#133) (4c955a0)
• revert gitleaks trigger from pull_request_target to pull_request (#161) (ea7315e)
• run gitleaks binary in ci to unblock fork pull requests (#162) (be307b2)
• use simple tag format for release-please (9e7a8e6)
• validate mcp tool inputs with zod and return actionable errors (#143) (ad749bc)

---

This PR was generated with Release Please. See documentation.