thv 0.48.0 ڈاؤن لوڈ

## Changelog
* 9fe5c43aebc984d856919e2c5b787535280e7754: Add SPIFFE client authentication dispatch (#6562) (@jhrozek)
* 59189485a40e6787dfe78b732ce0a8344b75f073: Add dial-control option to vMCP session factory (#6547) (@tgrunnagle)
* 71e8e502e16cdb3ecd803a6776eb3f0e67d0b611: Bump google.golang.org/grpc from 1.83.1 to 1.83.2 (#6558) (@dependabot[bot])
* 2cef443771eac7da5360fd64c9372e152915c139: Document AI plugin support (#6627) (@JAORMX)
* b6e804aa101532655cba5ba3f961776acbbf8b70: Evict vMCP sessions when a backend is dropped (#6549) (@tgrunnagle)
* ada84d0e39e42be873c7369195664dd0307cf2bd: Fail closed on keyed skill upgrade verdicts (#6628) (@samuv)
* ab27a23c5e4ae7f3a971ae56d36c9aa15a136e7e: Fail closed on malformed protected list responses (#6553) (@ChrisJBurns)
* cf9828313199552c12a2102648ff4cb45b49b42c: Fix issue-triage workflow model for Stacklok gateway (#6557) (@danbarr)
* 23644fb4896d1692468d55adf50c76892386ce0a: Fix setup-task version hints (#6565) (@rdimitrov)
* f3caffb9dd8d78d35e3301bfa1ed77f368032d66: Guard rotating refresh-token writes with compare-and-swap (#6548) (@reyortiz3)
* 9bcaec1afc0faa5aaca382e6f25d710627f15767: Harden find tool response filtering (#6555) (@ChrisJBurns)
* 5b669870017ee4b1ea39ea1b95a03f4c5b47aeab: Honour a pinned cosign key on plugin sync and upgrade (#6525) (@samuv)
* 649b242ad0e29c511e20568889b72ee17a708c0e: Make proxy request read timeout configurable (#6285) (@Sanskarzz)
* c25e508592bc3bcfa10dea99af04daaf341db95a: Release v0.48.0 (#6631) (@toolhive-release-app[bot])
* 4d212263a71e1cde07742b340d9587f51d960049: Require a discovery capability for key signing (#6560) (@samuv)
* f8c54a9a579fee92fac7ab3508b21ff59475adbc: Support OIDC dynamic client registration (#6544) (@jhrozek)
* 669cffb1cc30a0374159ef20c17091178e16e87b: Update actions/setup-node action to v7 (#6610) (@renovate[bot])
* 5fa4d2611c89fe477e067aca16a0a19064b00fa1: Update anthropics/claude-code-action action to v1.0.219 (#6568) (@renovate[bot])
* d9387fdf185e9764f96f0d1233e6545ac53701d0: Update anthropics/claude-code-action action to v1.0.220 (#6622) (@renovate[bot])
* d67a9a37f6314e5c74909e7502e909d9cc77daf3: Update auth and security libraries (#6577) (@renovate[bot])
* b6c3477fd1bee1145370a8a579ebf6aa2df51fce: Update aws-sdk-go-v2 monorepo (#6578) (@renovate[bot])
* 847784c1277fa2d35a61a9deb053be5fe72709f6: Update codecov/codecov-action action to v7 (#6612) (@renovate[bot])
* 6e6859f77ad1b53a87b41596d6119cd8173cb306: Update codespell-project/actions-codespell action to v2.4.3 (#6579) (@renovate[bot])
* 56ea13237ba97bb963b84b8d33fb57c1cc481926: Update container build actions (#6580) (@renovate[bot])
* 7d58a66717d370cfb0e2f38a0cc47f78b98bd53b: Update core workflow actions (major) (#6613) (@renovate[bot])
* 52fbca46ecf515ff37f06bf7cfa6b2c19e35931e: Update dependency helm to v3.21.4 (#6581) (@renovate[bot])
* c3453405ab27b8cb72b6930d7e6cdf1eb10832f9: Update dependency helm to v3.22.0 (#6623) (@renovate[bot])
* fcb162f20036f86d8672b7d88c1376a975011b09: Update dependency helm/helm to v3.21.4 (#6582) (@renovate[bot])
* e8a6b26be24ac9d1b57bf3b8053ffe8c489f0226: Update dependency kubernetes-sigs/kind to v0.33.0 (#6583) (@renovate[bot])
* 6d39bf7722ded62bb94594f28ada6ac67e446a69: Update dependency node to v24 (#6615) (@renovate[bot])
* b5854a2b19319d4a1c0b4f326d4eb559a3ce8403: Update dockerfile template base images (#6584) (@renovate[bot])
* 45f48bbf4192284ac2b04578b95535e731336a8b: Update ghcr.io/modelcontextprotocol/inspector Docker tag to v2 (#6616) (@renovate[bot])
* a35f23185a97e7a0208620dd6f602ce473b2da9a: Update ghcr.io/stacklok/thv-registry-api Docker tag to v1.5.2 (#6585) (@renovate[bot])
* f74c319c6a46c63387356e860cf4da85264a2f08: Update ghcr.io/zizmorcore/zizmor Docker tag to v1.30.1 (#6586) (@renovate[bot])
* c8abf17bd7d0bf8db28333eaf0cc53fa1ea8fb0d: Update github/codeql-action action to v4.38.0 (#6587) (@renovate[bot])
* 30675f64a6830113d8ccacc2467fe4ac398bf962: Update go.starlark.net digest to 89a6a09 (#5779) (@renovate[bot])
* 0972fb8d58e4009d27fc9743c4849d8d07d25c8d: Update golang.org/x/exp/jsonrpc2 digest to 85c1c22 (#6172) (@renovate[bot])
* 284ab84219b4a24d2fcde8d632eeb768abedda9d: Update helm/kind-action action to v1.15.0 (#6588) (@renovate[bot])
* f1b942801b33db63b38ccca58ce1dab39ca78550: Update module github.com/1password/onepassword-sdk-go to v0.4.1 (#6590) (@renovate[bot])
* 0178fd7d749a515f549a6be73a4537ed4eee5087: Update module github.com/cenkalti/backoff/v5 to v7 (#6617) (@renovate[bot])
* 67db7ffd32e1aba70388acc5b1d4daeb327b68bb: Update module github.com/charmbracelet/x/ansi to v0.11.8 (#6569) (@renovate[bot])
* 4411a30bc0c0bf7e0d441a17ee6194f4ed939fa1: Update module github.com/getsentry/sentry-go to v0.49.0 (#6591) (@renovate[bot])
* 1fdc5ed97091dcf1f9caa615d0aaebc67d467151: Update module github.com/go-chi/chi/v5 to v5.3.2 (#6570) (@renovate[bot])
* 60f16841fbd900738a73896fb23f71cbcdde0c5c: Update module github.com/go-git/go-billy/v5 to v5.9.1 (#6571) (@renovate[bot])
* 300ca10c5915385c625bd27feed8b61f876929a4: Update module github.com/gofrs/flock to v0.13.1 (#6572) (@renovate[bot])
* ceaa034bfc633a00f842a98252d9b8e48fd52246: Update module github.com/lestrrat-go/jwx/v3 to v3.3.0 (#6593) (@renovate[bot])
* 8facc2b2672ca150fc004d7ff73f96f63e86f2d9: Update module github.com/lestrrat-go/jwx/v3 to v4 (#6618) (@renovate[bot])
* 02c433a626b65f26c7000c3e7796159712aff3a4: Update module github.com/moby/moby/api to v1.56.0 (#6594) (@renovate[bot])
* 1343bab6afda079f5667e8ae0e5e23e5fc1704f1: Update module github.com/moby/moby/client to v0.6.0 (#6595) (@renovate[bot])
* 8186ed37349788642e85364cd6a7d6338ab2f28e: Update module github.com/ory/x to v0.0.729 (#6573) (@renovate[bot])
* 9f7cf299f0d1b31c184794fbd55f2ef8e34133fc: Update module github.com/pelletier/go-toml/v2 to v2.4.3 (#6596) (@renovate[bot])
* a5b11bbb183c832281edb061e72f6b07d5d12594: Update module github.com/pressly/goose/v3 to v3.28.0 (#6597) (@renovate[bot])
* 70393b11e71cf4cf207afda2b6fc186663ea8c28: Update module github.com/spiffe/go-spiffe/v2 to v2.8.1 (#6598) (@renovate[bot])
* cfdd65079b769fbed1b1ef084fc00a49b097ccf9: Update module github.com/testcontainers/testcontainers-go to v0.44.0 (#6599) (@renovate[bot])
* bfa767f2e37df9bedb2504084bdfc3380738c63f: Update module github.com/tidwall/gjson to v1.19.0 (#6600) (@renovate[bot])
* 7d922187a7716b74cb6e8c64f3db76f1793433f7: Update module golang.ngrok.com/ngrok/v2 to v2.2.0 (#6601) (@renovate[bot])
* c7ed3b7080f7ec34b2dde5a3f8b2b0128033002c: Update module golang.org/x/crypto to v0.57.0 (#6602) (@renovate[bot])
* 837d8c5d104b37789be87c913bd14e4f8c3ffeb4: Update module golang.org/x/mod to v0.41.0 (#6603) (@renovate[bot])
* cdb04c94f2462553fc27572bc8db9bb88a0c3c78: Update module golang.org/x/sync to v0.23.0 (#6604) (@renovate[bot])
* acb5a94891d1c90aea84e4c20d80263f4b3ee443: Update module golang.org/x/sys to v0.48.0 (#6605) (@renovate[bot])
* 8ee3563b9b362d7e974726f8e4c65a7beb5ef3a9: Update module golang.org/x/term to v0.46.0 (#6606) (@renovate[bot])
* 559631f687d1b63fc67cfde8c2725cd9e07c888f: Update module golang.org/x/time to v0.16.0 (#6607) (@renovate[bot])
* 03b1b1bb443ee2930dfcfe179da25c0201173b9e: Update module modernc.org/sqlite to v1.58.0 (#6608) (@renovate[bot])
* 1f87350017b1d4e4e6a28054d9146d7af9a16374: Update opentelemetry and observability (#6574) (@renovate[bot])
* a22ed46032a1b38a9329945322226917a3d12580: Update registry Docker tag to v3 (#6619) (@renovate[bot])
* d3eb81e47bf65f4ae5d6d01576279d34a5c6a96b: Update setup and language actions (major) (#6620) (@renovate[bot])
* 44807d92e2a26a0aea36cc77f45c98ff746fe223: Update slackapi/slack-github-action action to v3.0.5 (#6575) (@renovate[bot])
* 68360bbc4b3ce5c0e3bae270ce8f201bfa6e19ca: Update slackapi/slack-github-action action to v4 (#6621) (@renovate[bot])
* 10b2f90c1475a7709d2ac0b877f745d93a61be9a: Update testing libraries (#6609) (@renovate[bot])
* df6d7ab85fdddd89fce5d74568988d765a29f67d: Update zizmorcore/zizmor-action action to v0.6.4 (#6576) (@renovate[bot])
* 1843e3ff662856dcb0bfd68082355a46c6370c51: Use Basic auth for OAuth2 upstreams (#6543) (@jhrozek)