v1.0.1

predictalot v1.0.1 — docs restructure into README + docs/

Patch release. README slimmed to a project pitch + quick-start + links;
deep API content moved into docs/{timeseries,tabular,mcp,configuration,
architecture,accuracy,errors}.md.

No source files changed. v1.0.0 image is fully compatible — this release
ships clearer docs, not new behavior.

v1.0.0

predictalot v1.0.0 — tabular ML surface + FM extras + /v1/timeseries/…

v0.2.1

predictalot v0.2.1 — require auth on /v1/<type>/models

Security patch. Closes a usage-pattern info leak: with auth
configured, the per-type GET /v1/<type>/models endpoints shipped
in v0.2.0 were missing the Depends(check_bearer) guard and would
return the installed model list, loaded state, and last-used
timestamps to unauthenticated callers. Now bearer-protected. The
/healthz endpoint stays open. Open-auth deployments
(PREDICTALOT_ALLOW_NO_AUTH=1 + empty token list) are unaffected.

v0.2.0

predictalot v0.2.0 — type-routed API

Breaking change: /v1/forecast and /v1/models are removed and replaced
by six per-type endpoint triples under /v1/<type>/. MCP rewritten to
26 per-(type, model) tools. Adds hardening around streaming body size,
NaN/Infinity weights, jagged multivariate channels, covariate shape,
and non-ASCII bearer-token comparison. Lockfile fallback removed from
prod Dockerfiles. Lint baseline (.flake8) aligned with black.

v0.1.1

predictalot v0.1.1 — CPU image is amd64-only (no aarch64 torch wheel …