chore(release): publish @askrjs/node 0.0.7

[smiggleworth]

Summary

• prepare @askrjs/[email protected] from current main
• release the static-asset, bind-default, WebSocket, and MCP security fixes merged in fix: bound MCP input before line parsing #3, fix: contain static assets across symlinks #5, fix: require explicit public network binds #7, fix: bound WebSocket rejection bodies #9, and fix: validate static asset request hosts #11

Validation

• npm run fmt -- --check
• npm run check (lint, typecheck, 27 tests, build, publint, package artifact contract)
• clean install from the generated tarball
• imported @askrjs/node and @askrjs/node/mcp; verified createNodeHandler, listen, serve, and connectMcpStdio plus declarations

Publication will use the trusted Publish Package workflow after squash merge.

[Copilot]

Pull request overview

Prepares the @askrjs/node package for the 0.0.7 release, aligning the published artifact metadata with the release described in the PR summary (static asset, bind-default, WebSocket, and MCP security fixes previously merged).

Changes:

• Bump @askrjs/node version from 0.0.6 to 0.0.7 in package.json.
• Update the corresponding version fields in package-lock.json to match.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
package.json	Updates package version to 0.0.7 for the release.
package-lock.json	Keeps lockfile package/version metadata consistent with 0.0.7.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.