v0.7.6 — Custom Endpoints & MCP Headers

Features

MCP custom header support — HTTP-transport MCP sources can now send custom headers on all requests (discovery and tool invocation). Header values are stored securely in the credential store via headerNames. Fixes #410. (e4af87b0, 8bce7257)
--workspace-dir for validate-server — the --validate-server CLI flag now accepts --workspace-dir to test pre-committed sources against a specific workspace layout. (2d135a6f)

Custom endpoint not persisted — customEndpoint field was silently dropped when saving LLM connection config, so custom Anthropic-compatible endpoints reverted to the default API on restart. Fixes #413. (09b62551)
Wrong model IDs for custom endpoints — custom endpoint defaults now use correct Anthropic model IDs instead of stale values. (8a3aa4f9)
OAuth refresh loop for browser-auth sources — sources that require browser-based authorization no longer trigger silent OAuth refresh attempts that would fail and loop. (42d6592a)
Hardcoded "Claude Max" in error — session expired error message no longer references "Claude Max" by name. (01517b3d)

OSS build parity — added platform packaging scripts (build-dmg.sh, build-linux.sh, build-win.ps1) and macOS entitlements plist to the OSS sync allowlist, enabling community contributors to build production packages. Addresses #422.