chore(main): release 0.2.3

[release-please]

🤖 I have created a release beepboop

0.2.3 (2026-08-18)

Features

• groups: Add ttlMs and cacheScope customization to config (mcp-toolbox#​3805) (a5d4947) (cff6189)
• migrate: Convert toolset to group kind during migration (mcp-toolbox#​3704) (0adeaa5) (cff6189)
• server/mcp: Introduce generic client extension registry (mcp-toolbox#​3723) (016245c) (cff6189)
• skill: Add review-prs skill for mcp-toolbox (mcp-toolbox#​3743) (5b7bacc) (cff6189)
• tools: Add cloud-sql-connect-gce for pg, mysql, mssql (mcp-toolbox#​3740) (ca58fa4) (cff6189)
• adopt Agent Plugin spec and generate harness manifests (#105) (2a4523f)

Bug Fixes

• auth/mcp: Derive PRM URL from Toolbox URL (mcp-toolbox#​3765) (aa30842) (cff6189)
• config: Ignore environment variables in YAML comments (mcp-toolbox#​3807) (79aa732), refs mcp-toolbox#​3793 (cff6189)
• mcp: Return Tool execution error for invalid input param (mcp-toolbox#​3799) (8120197) (cff6189)
• prebuilt/cloud-storage: Declare tool collections as groups (mcp-toolbox#​3764) (7d468be) (cff6189)
• server: Avoid a nil-flusher panic in the SSE handler (mcp-toolbox#​3520) (947f42f) (cff6189)
• server/mcp: Disallow client overriding URL bound parameters (mcp-toolbox#​3798) (f15a9c7) (cff6189)
• util: Convert exponent-form JSON numbers in ConvertNumbers (mcp-toolbox#​3730) (e9713ee) (cff6189)
• ci: restore pull_request_target for mirror-changelog (#109) (05b0618)
• treat database tool output as untrusted data in model context (#102) (a98397a)

---

This PR was generated with Release Please. See documentation.

[release-please]

🤖 Created releases:

• 0.2.3

🌻