v0.3.0 — Aligned with pqc-mcp-v3

Quantum Seal v0.3.0

Aligned with post-quantum-mcp v0.7.0 (pqc-mcp-v3 protocol).

Changes

• verify-sender skill rewritten to use pqc_hybrid_auth_verify
• Content safety rules — decrypted messages treated as untrusted input
• Identity card split — public card (shareable) + local state (handles)
• Replay language harmonized across verify-sender, secure-receive, quantum-handshake
• PQC_REQUIRE_KEY_HANDLES=1 enabled by default in .mcp.json
• Filesystem layout expanded: discovery/, handshakes/, state/
• 13 behavioral E2E tests (keygen → seal → verify → open → replay → policy)

Review Status

Part of six-model adversarial review. Agent-side content safety rules address prompt injection via encrypted messages.