release: v3.3.0 — platform hardening & admin unification (Track F.1–F.8)

Plugin visibility control, UI/UX fixes, unified admin panel,
database-backed settings, and security hardening.

Highlights:
- ENABLED_PLUGINS env var for plugin visibility (F.1)
- Admin designation via ADMIN_EMAILS (F.4a)
- Master key scope control (F.4b)
- Panel unification + settings from UI (F.4c)
- exec() removal, shell injection fix, bcrypt migration (F.8)
- 5 new test suites

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

tests/test_f3_service_pages.py

@@ -0,0 +1,35 @@
+"""Tests for MCP service pages (Phase F.3)."""
+
+from core.dashboard.routes import get_service_page_data
+
+
+class TestServicePageData:
+    async def test_wordpress_service_data(self):
+        data = await get_service_page_data("wordpress")
+        assert data is not None
+        assert data["plugin_type"] == "wordpress"
+        assert data["display_name"] == "WordPress"
+        assert "tools" in data
+        assert len(data["tools"]) > 0
+        assert "credential_fields" in data
+
+    async def test_supabase_service_data(self):
+        data = await get_service_page_data("supabase")
+        assert data is not None
+        assert data["display_name"] == "Supabase"
+
+    async def test_unknown_plugin_returns_none(self):
+        data = await get_service_page_data("nonexistent")
+        assert data is None
+
+    async def test_tools_have_name_and_description(self):
+        data = await get_service_page_data("wordpress")
+        for tool in data["tools"]:
+            assert "name" in tool
+            assert "description" in tool
+
+    async def test_tools_have_scope(self):
+        data = await get_service_page_data("wordpress")
+        for tool in data["tools"]:
+            assert "scope" in tool
+            assert tool["scope"] in ("read", "write", "admin")