v0.4.7 — MCP annotations + outputSchema, resources/prompts surface, OTLP spans

Publishes the existing v0.4.7 tag (568e573d) as a GitHub Release. The tag and the
npm/JSR 0.4.7 artifacts were already published; only the GitHub Release was missing, so
release-tracking consumers were still seeing v0.4.6.

Highlights since v0.4.6 (66 commits)

MCP surface

• feat(mcp-bridge): MCP annotations + outputSchema on all tools; Teranga scoped surface (#75)
• feat(mcp-bridge): resources + prompts surface (#89)
• feat(mcp-bridge): OTLP/HTTP+JSON span emission (#91)
• fix(mcp-bridge): Node compat + JSR slow-types via main.d.ts (#96)

Architecture RFCs (epic #87)

• ADR-0007 trust-tier policy DSL + ADR-0008 cartridge marketplace (#92)
• ADR-0009 sandbox cartridge + ADR-0010 cross-machine federation (#93)
• ADR-0011 inbound webhooks + ADR-0012 server-initiated sampling (#95)

Cartridges & docs

• k9iser-mcp — central K9 contract regeneration (#73)
• README accordion sections for all 115 cartridges (#86)
• OpenSSF Scorecard + Software Heritage badges, CITATION.cff (#85)

CI / packaging

• Corrected publish workflow SHA pins, unblocking npm + JSR (#88)
• NPM_TOKEN auth fallback for npm publish (#97)
• Concurrency-cancel guards on canonical check workflows (#79, #80)

Why this release exists

v0.4.6 predates #75, so any consumer pinned to "latest release" saw a tool surface with
no annotations and no output schemas — including registry scanners. This release makes the
latest GitHub Release match what npm and JSR have shipped since 2026-05-20.