hanzo-tools and hanzo-mcp stay on mcp 1.x

hanzo_tools.core imports mcp.server.FastMCP, which mcp 2 removed, so a
fresh resolve that picks mcp 2.2.0 fails at import. The published
hanzo-mcp 0.15.17 already declares mcp<2; the tree now says the same,
and hanzo-tools, which owns the import, says it too.

Claude-Session: https://claude.ai/code/session_01Dc8DXc3fEQCRHUa6XWK4Ku

pkg/hanzo-mcp/pyproject.toml

@@ -21,7 +21,7 @@ dependencies = [
     # 2.2.1 is the first release shipping hanzoai.protocols (permissions.py imports it)
     "hanzoai>=2.2.1",
     # Core MCP dependencies
-    "mcp>=1.25.0",
+    "mcp>=1.25.0,<2",
     "fastmcp>=2.14.4",
     "pydantic>=2.12.5",
     "pydantic-settings>=2.12.0",

pkg/hanzo-tools/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "hanzo-tools"
-version = "0.3.6"
+version = "0.3.7"
 description = "Hanzo AI tools - core infrastructure and tool bundles"
 readme = "README.md"
 requires-python = ">=3.12"
@@ -19,7 +19,7 @@ keywords = ["hanzo", "tools", "mcp", "ai", "agent"]
 
 # Core dependencies (merged from hanzo-tools-core)
 dependencies = [
-    "mcp>=1.25.0",
+    "mcp>=1.25.0,<2",
     "fastmcp>=2.14.1",
     "pydantic>=2.12.5",
     "typing-extensions>=4.13.0",