Release client v1.0.0 with verified Packagist installation

[Llewellynvdm]

Why

The client is registered on Packagist, but users need a stable version, clear installation instructions, and verification of the actual public distribution.

Changes

• Prepare client v1.0.0, its first stable release. Document independent versioning and compatibility with component 0.1.1 and console plugin 0.1.0.
• Add stable Packagist/download badges, release/changelog links, Composer support metadata, project/global installation using ^1.0, AI stdio setup, and a complete PHP SDK example.
• Declare version 1.0.0 and immutable tested server revisions in release.json. A reviewed manifest version change merged to main starts the tested release workflow automatically.
• Gate publication on source contracts, Docker Compose and installed Joomla interoperability. Create the immutable tag and GitHub release only after these pass.
• Verify the exact release from public Packagist on PHP 8.3/8.4, waiting for indexing and checking the installed distribution matches the tested release commit.
• Add independent consumer tests: fresh Composer project/home/cache, distribution/autoload provenance, generated executable, real loopback HTTPS, discovery, pagination, tools/resources/prompts, authentication, redirects and session cleanup.
• Fix missing SDK HTTP protocol headers using the actual negotiated revision. Source regressions cover counter-offers and header precedence; stable consumer releases require zero missing SDK headers.
• Retain consumer evidence and repair installed-interoperability checkouts after the former feature branches were deleted.

Release behavior

Merging this PR declares and starts publication of v1.0.0. Publication remains gated on testing the merged commit. Existing tags are never moved. API/authentication errors fail closed, and interrupted publication can recover on the same tested commit. Optional manual dispatch remains available.

Pinned server revisions:

• component 0.1.1: 14c715c50c2cc29fd3c8cc3c4780442efb507398
• console plugin 0.1.0: 993522852770e2f8968ab066deedef00f174d8c7

Validation

• All eight source/Docker/installed/public-consumer CI jobs passed on the preceding preparation commit.
• 37 offline release checks pass, covering immutable tags, API failures, main-only publication, annotated tags, interrupted recovery and clean workflow outputs.
• Nine metadata-parser scenarios and PHP/Bash syntax checks pass.
• All updated PR workflows pass at aa960899aa6de8e197ad8c8531538bb356df252d:
  • Packagist consumer
  • Tested client release
  • PHP client contracts
  • Installed client interoperability
• Merged release commit: 25fa5150e8287710573a0670070752f27a88d6f4.

Published release evidence

• PR merged through the GitHub connector.
• Stable v1.0.0 published; tag points to the tested merge commit.
• Full release workflow passed: source contracts, Docker Compose, installed Joomla interoperability, publication, and exact public distribution verification.
• Packagist indexed v1.0.0 at the same release commit. Fresh Composer archive installations passed 58 checks each on PHP 8.3 and 8.4, including executable, SDK and protocol behavior; both report legacyProtocolHeaderRequests: 0.
• All main workflows pass. A separate main Docker job initially timed out starting its test fixture and passed on a targeted retry; release-gate Docker checks passed on their first attempt.

Install the stable package:

composer require 'joomengine/mcp-client:^1.0'

Consumer reports, package provenance and logs are retained as workflow artifacts.