Release v1.8.0 developer kit

[docxology]

Summary

• Release v1.8.0 as the developer-kit release dated 2026-06-12.
• Adds packaged template assets plus gnn templates list, gnn templates show NAME, and gnn pull NAME.
• Hardens local MCP HTTP with bearer auth by default, explicit insecure-local opt-in, safe tool allowlist, and resource access denial unless allowlisted.
• Preserves v1.9 as unreleased model-family reliability/interpretablity work and keeps autonomy as a v4 precursor only.
• Fixes the CI-sensitive optional Julia package gate so missing Julia backend packages skip instead of failing when Julia itself is installed.

Local Validation

• git diff --check
• ruff check over changed/untracked Python files
• uv run --extra dev python doc/development/docs_audit.py --strict --check-anchors --no-write
• uv run --extra dev python scripts/check_gnn_doc_patterns.py --strict
• uv run --extra dev python scripts/check_maintained_doc_terms.py --strict
• uv run --extra dev python scripts/check_repo_terminology.py --strict
• uv run --extra dev python scripts/check_capability_contracts.py --strict
• uv run gnn templates list
• uv run gnn templates show pomdp-gridworld-3x3
• uv run gnn pull pomdp-gridworld-3x3 --output-dir /tmp/gnn-pull --dry-run
• GNN_MCP_TOKEN=local-dev-token uv run --extra dev python -m pytest src/tests/mcp/test_mcp_http_auth.py -q -> 12 passed
• uv run --extra dev python -m pytest src/tests/cli/test_templates_cli.py src/tests/mcp/test_mcp_http_auth.py src/tests/docs/test_capability_contracts.py -q -> 32 passed
• just lint
• uv run --extra dev python -m pytest --collect-only src/tests/ -q --tb=no --ignore=src/tests/llm/test_llm_ollama.py --ignore=src/tests/llm/test_llm_ollama_integration.py -> 2397 collected
• uv run --extra dev python -m pytest src/tests/ -q --tb=no --ignore=src/tests/llm/test_llm_ollama.py --ignore=src/tests/llm/test_llm_ollama_integration.py -> 2379 passed, 17 skipped, 1 xfailed
• git diff --quiet -- output

CI Context

Read-only CI inspection showed current main and Dependabot PRs #4-#8 failing the Python CI job before this branch. The failing path was src/tests/pipeline/test_pomdp_gridworld_cross_framework.py::test_gridworld_render_execute_analyze_visualize_strict in environments with Julia installed but optional Julia packages missing. This branch keeps real local Julia execution strict when packages exist and skips only the missing-optional-package case.