🗑️ Remove pre-commit hook that auto-generated AGENTS.md dependencies section

Simplify AGENTS.md to reference source files directly instead of duplicating content

🗑️ Remove commands/gp.md file

🚚 Move command files from .cursor/commands to root commands directory

🔧 (daily-bug-review.yml): add display_report option to show full output in Claude Code step

🔧 Remove cloudflare-api from MCP server configuration example

🔧 Update MCP configuration setup for Cursor IDE integration

♻️ (app.rb): remove provides: :json parameter from MCP route definition

🔧 (config): add .mcp.json and mcp.json to .gitignore
🔧 (config/boot.rb): set Delayed::Worker max_run_time to 15 minutes
🔧 (lib/atproto_client.rb): add timeout and open_timeout configuration to Faraday clients

🐛 Fix convert_nil_booleans_to_false and sanitize_fields to skip flagged_for_destroy records

✨ (events): add option to hide waitlist for sold out events

This change introduces a new hide_waitlist boolean field that allows event organisers to hide the waitlist functionality. When enabled, the waitlist form and related messaging are hidden, and alternative content is displayed instead (such as a link to the next occurrence of a recurring event, contact email, or the organisation's upcoming events page).

🔥 Remove prevent_reminders field from EventFields concern

📝 (gatherings.md): add documentation for copying gathering structure Explains how to duplicate timetables, rotas and options for similar gatherings

🐛 Fix copy gathering functionality to require admin rights on destination

🐛 Fix validation to check member_limit instead of fixed_threshold

⬆️ (codeql.yml): upgrade CodeQL GitHub Actions from v3 to v4

🔧 (codeql): add query exclusions for Ruby XSS and Actions permissions

The diff adds two new query filter exclusions to the CodeQL configuration to reduce false positives in security scanning.

🐛 Fix backslash escaping in commit message rendering

♻️ (stats_helper.rb): refactor URL parsing to handle more formats and extract reusable helper

✨ (stats_helper.rb): add support for git+, git@, and standard HTTPS GitHub URLs

The previous implementation used simple string inclusion checks which didn't handle all URL formats properly. The new approach uses proper URI parsing and handles edge cases like git+ prefixes and SCP-style URLs.

👷 (CI): add CodeQL security analysis workflow and configuration

🗑️ (models/account.rb): remove legacy token decryption fallback using SESSION_SECRET