feat: fuzzy dedup, adaptive intensity, benign summarize, MCP server, … #20

	name: Auto Release on Merge to Main

	on:
	push:
	branches: [main]

	permissions:
	contents: write

	jobs:
	tag-and-release:
	runs-on: ubuntu-latest
	# Skip if commit message contains [skip release]
	if: "!contains(github.event.head_commit.message, '[skip release]')"
	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0

	- name: Read current version
	id: current
	run: \|
	VERSION=$(grep -E '^version\s=' Cargo.toml \| head -1 \| sed 's/."$.$"./\1/')
	echo "version=$VERSION" >> "$GITHUB_OUTPUT"

	- name: Check if tag already exists
	id: tag_check
	run: \|
	if git rev-parse "v${{ steps.current.outputs.version }}" >/dev/null 2>&1; then
	echo "exists=true" >> "$GITHUB_OUTPUT"
	else
	echo "exists=false" >> "$GITHUB_OUTPUT"
	fi

	- name: Create and push tag
	if: steps.tag_check.outputs.exists == 'false'
	env:
	GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	run: \|
	git config user.name "github-actions[bot]"
	git config user.email "github-actions[bot]@users.noreply.github.com"
	git tag "v${{ steps.current.outputs.version }}"
	git push origin "v${{ steps.current.outputs.version }}"
	echo "Tagged v${{ steps.current.outputs.version }}"
	# GITHUB_TOKEN-pushed tags don't trigger other workflows.
	# Dispatch release.yml manually on the tag ref instead.
	gh workflow run release.yml --ref "v${{ steps.current.outputs.version }}"

	- name: Skip (tag already exists)
	if: steps.tag_check.outputs.exists == 'true'
	run: echo "Tag v${{ steps.current.outputs.version }} already exists — bump version in Cargo.toml via PR to trigger a new release."

Provide feedback