v3.1.0 — Homebrew packaging (repo side)

The HTTP server now obtains its own bearer token from the 0600 token file
when none is supplied via the environment, so the packaged brew services
path runs with auth ON without a per-machine secret in a static plist.
~/.code-executor/mcp.json becomes the canonical downstream-config location.