chore(release): bump version to 0.9.5

[c2j]

Summary

Bumps codeweb version 0.9.4 → 0.9.5 in Cargo.toml and Cargo.lock (single tracked occurrence each). No other files reference the version.

Includes everything merged since v0.9.4:

• MCP lifecycle tools: codeweb_init / codeweb_analyze / codeweb_diff (FEAT：MCP模式下无init等指令 #171, feat(mcp): init/analyze/diff lifecycle tools behind MCP (#171) #172) with hot-swap, strict write confinement, and no auto-analyze
• Hardening: symlink and store-path write-escape rejection (fix(mcp): close the symlink escape in the write guard + more #171 validation #174), escaping of model-supplied project name in generated codeweb.toml (fix(project): escape model-supplied name in codeweb.toml + more #171 validation #176), documented invocation shapes covered by tests (test(mcp): cover the documented invocation shapes (#171) #177)
• Docs: AGENTS.md now requires explicit human approval for all merge operations (docs(AGENTS): merge operations require explicit human approval #178)

Verification

• cargo build --features full — clean
• cargo fmt --all -- --check — clean
• cargo clippy --features full -- -D warnings — clean
• cargo test --features full -- --skip test_path_mapping_applied --skip test_serve_ — 1148 passed, 0 failed

Notes

Tag v0.9.5 will be created on the main merge commit after this PR is merged (tagging by human-approved release flow).