Updating ALLOWED_TOOLS to fail early if misspelled tool in list. Thanks to @cyb3ralbert!

Bugfix for kubectl_patch's patch_file argument.

Bug fixes for shortflag quirks.

Dependency bump.

Updating SSE dns rebinding protection and adding support for exec_in_pod error outputs.

Thanks to @KaloyanNaumov for the exec_in_pod updates.

Add security.mcpAuthToken to the Helm chart and warn at install time when http/sse transport runs without authentication (#348).

Harden the kubectl/helm dangerous-flag guard against the attached short-flag token form (#347).

Restrict server-side path reads (filename/valuesFile) to the stdio transport in kubectl_apply, kubectl_delete, and Helm chart tools (#346)

Readme cleanup: badges down to one line, replace Gemini CLI install directions with Codex (#340)

Fix kubectl_get output: "custom" failing under shell-less execFileSync by unquoting the custom-columns argument (#339)