Release v0.2.2

MCP search results surface the session identity (authenticated/is_user/
username) and hint when 0 results is due to a non-user identity rather than
an empty collection; auth_whoami flags service-account sessions.