chore(release): cut 1.3.0

Releases the accumulated unreleased work (11 commits since 1.2.0):
five new tools (security_alerts, pr_review_thread_ops,
branch_protection_status, deployment_status, issue_dedup), dryRun
previews on the remaining mutation tools, compact mode for repo_status
and org_pulse, truncatedCount on more list tools, and github-client
retry/timeout/settled-pool resilience helpers. Public npm @rethunk/
scope had stalled at 1.2.0; this cuts the tag that publishes it.

Author: AlbinoGeek

CHANGELOG.md

@@ -9,6 +9,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.3.0] — 2026-05-29
+
 ### Added
 
 - **`security_alerts` tool** (read) — rolls up Dependabot and Code Scanning alerts by severity for a repository. Requires `security_events` scope (or `repo`). Returns `{ rollup, dependabot, codeScanning }` with per-source `enabled`, `total`, `truncatedCount`, and alert arrays. A 403/404 on either source reports `{ enabled: false, reason }` without aborting the other source.

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rethunk/github-mcp",
-  "version": "1.2.0",
+  "version": "1.3.0",
   "description": "MCP stdio server: high-value GitHub rollup tools for LLMs — multi-repo dashboards, PR preflight, CI diagnosis, and more.",
   "type": "module",
   "private": false,