chore(release): 0.91.0

[padak]

Release PR for v0.91.0. Its only job is the version bump, the changelog entry, and resolving the vNEXT placeholders left behind by the feature PRs — no behavior changes.

Scope — every PR merged since v0.90.1

PR	Issue	Reporter	What
#692	#687	@padak	workspace load: zero-copy CLONE by default, >1 GiB COPY guard, --timeout + fire-and-forget fix
#695	#690	@MichalProchazkaP3	notification write path — create / delete / replace-recipient
#694	#686	@DasaDama	sync push stamps API-derived baselines; one canonical script[] shape; statement-boundary markers
#696	(follow-up to #686)	@DasaDama	runtime-safety script guard also runs on the push path
#691	#689	@DasaDama	sync ignores keboola.mcp-server-tool; manifest ignoredComponents is now live
#693	#688	@vojtechnovotny-heu	permissions set validates --allow/--deny patterns against known operations
#681	#679	@padak	serve honors the root-level --config-dir
#627	—	requested by Jordan Burger	publish the plugin through keboola/ai-kit; deprecate this repo's marketplace
#697	—	—	docs: move (since vNEXT) tags out of markdown headings
#698	—	—	docs: polish the workspace-load skill guidance after #692

Eight changelog bullets cover all ten PRs (the two docs-only PRs are folded into the Note: bullet, and #696 rides with #694 since they are one fix).

Checklist walk-through

• 1 scope collected from git log v0.90.1..origin/main
• 2 pyproject.toml → 0.91.0
• 3 changelog entry — one logical change per bullet, every first sentence under the 160-char cap (two needed rewriting)
• 4 make vnext-check — 54 placeholders resolved across 11 files, edited line-by-line off the checker's own output (never a repo-wide sed: backticked vNEXT in the process docs is prose, not a gate). Now: All 556 version gates across 77 versions resolve to a release.
• 5 make version-sync — plugin.json, marketplace.json, uv.lock
• 6 make skill-gen — no command-tree drift
• 7 whatsnew.ts — deliberately empty: git diff v0.90.1..main -- web/ is empty, so this release ships nothing UI-visible. The /auth/* and /notifications serve routes are API-only; no SPA page consumes them yet.
• 8 keboola-expert.md — matrix rows for the notification write path and the new workspace load semantics already landed with feat(notification): write path — create/delete/replace-recipient subscriptions (#690) #695/feat(workspace): zero-copy CLONE by default, large-COPY guard, fire-and-forget timeout fix #692/docs(plugin): polish workspace-load skill guidance after #692 #698; 53 294 B of the 70 000 B budget
• 9 gotchas.md — ten entries, each now tagged (since 0.91.0)
• 10 CLAUDE.md ## All CLI Commands — three new notification leaves documented; check_command_sync.py OK (267 commands)
• 11 commands-reference.md — same three leaves plus the workspace load / sync / permissions notes
• 12 make check — 6317 passed, 12 skipped; lint, format, typecheck, skill, version, version-gates, command-sync, endpoints, changelog, error-codes, sentinel-guards, loc all green
• 13 make test-e2e — needs E2E_API_TOKEN / E2E_URL; to be run by the maintainer before tagging

Files touched here

Plugin / doc surfaces (all vNEXT → 0.91.0 only): plugins/kbagent/agents/keboola-expert.md, plugins/kbagent/skills/kbagent/references/{gotchas,commands-reference,permissions-workflow,sync-workflow,workspace-workflow}.md, plugins/kbagent/.claude-plugin/plugin.json (version-sync), .claude-plugin/marketplace.json (version-sync).

Repo docs: CLAUDE.md, docs/{TUTORIAL,guide,web-server}.md, src/keboola_agent_cli/commands/context.py.

Release mechanics: pyproject.toml, src/keboola_agent_cli/changelog.py, uv.lock.

---

[devin-ai-integration]

Devin Review found 3 potential issues.