Changes
- #1235 fix(iac): normalize default restart policy so plan converges
- #1337 chore(host_env): add more names to the list
- #1338 fix(volume): use the same local name handling for single-file downloads
- #1339 fix(dev): write the compose file through a fresh temp file
- #1340 fix(mcp): accept server/discover, string booleans, and report proxy failures
- #1308 fix(up): tighten symlink handling when bundling the project
- #1345 test(reporter): drive the deferred-warning rules on a local buffer
- #1198 test(ca): stabilize Windows terminal regression tests
- #1350 ci: declare GITHUB_TOKEN permissions in release and cargo-audit