Changelog
- 9c4d696 Fix tool poisoning regex gaps found via MCPHammer testing (#117)
- 465cee2 Prepare v0.2.5: changelog, update version refs (#121)
- b33f1fd feat(mcp): add --env flag for environment variable passthrough to child processes (#119)
- a002ccf refactor: extract internal/normalize package, harden injection patterns (#116)