Remove key field from CredentialMapping

Support HTTP registries for local development

Eliminate AirlockTool CRD — discover tools from OCI image labels

Fix invalid input_schema that prevented Claude from calling tools

Fix Dockerfile.agent → Dockerfile.runtime in release workflow

Add AirlockChamber CRD, rename agent to runtime, add execve and output scrubbing

Add --controller-addr flag, watcher readiness gate, and gRPC health probe

Upgrade kube 0.99 → 3.1 to fix RUSTSEC-2025-0134 cargo audit warning

Replace host-side daemon with k8s tool execution controller

Restore .sig output and add build provenance to releases

Update page title and description for clarity

Fix stale host-side and Profiles references in landing page

Add --config and --sockets flags for container deployments

Update index.html

Update docs for registration model and remote deployment