feat(v3.12.0): media pipeline, AI image generation, capability probe, companion v2.9.0

Three-month batch sync from internal repo (~80 commits) covering Tracks F.5a, F.7e, F.8, F.17, F.18, F.X.

WordPress media pipeline
- Pillow-based optimization, AI image generation (OpenAI / Stability / Replicate / Google Nano Banana / OpenRouter), chunked + resumable uploads, bulk delete/reassign, idempotent retries.

Capability discovery (F.7e)
- Per-site credential probe + adapters for WordPress / WooCommerce / Gitea, tier-fit unions granted ∪ roles, capability badge UI with HTMX partial re-check, install hint in every companion-unreachable error.

Companion plugin overhaul
- Renamed wordpress-plugin/airano-mcp-seo-bridge → wordpress-plugin/airano-mcp-bridge.
- Eight new endpoints: /capabilities, /bulk-meta, /export, /cache-purge, /transient-flush, /site-health, /audit-hook, /upload-and-attach.
- wp.org Plugin Check pass: i18n, WP_Filesystem, scheme allowlist on audit-hook URL.

Other
- Gitea ergonomics (F.17): batch files, tree, search, compare, releases, fork.
- Opportunistic bcrypt upgrade for legacy SHA-256 admin keys (F.8).
- n8n refactor: structured errors, capability probe, missing tools backfilled.
- Idempotency-Key dedup for AI media upload retries; WP client fast-fails on unreachable sites.

Docs
- README + CLAUDE.md drop the fixed "633 tools" claim. The total grows with each release; per-plugin approximations + dashboard-surfaced counts replace it.
- Tools/Tests badges removed in favour of "Plugins: 10".

Deployment
- PyPI mirror chain, optional BUILD_HTTP_PROXY, Alpine→Yandex apk mirror, Debian-slim Plan-B Dockerfile, mirror.gcr.io variant.

CI
- Black + Ruff clean on Python 3.12; pytest tests/ green.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

plugins/base.py

@@ -165,6 +165,40 @@ class BasePlugin(ABC):
         """
         return {"healthy": True, "message": "Health check not implemented for this plugin"}
 
+    async def probe_credential_capabilities(self) -> dict[str, Any]:
+        """F.7e — report what the saved credential can actually do.
+
+        Plugins should override this to call the upstream service
+        (WordPress companion ``/capabilities``, WooCommerce
+        ``system_status``, Gitea ``/user`` header scopes, Coolify
+        ``/api/v1/teams/0``, etc.) and return the subset of capability
+        names the caller's token actually grants.
+
+        The base implementation returns a well-shaped "probe not
+        available" payload so callers can handle all plugin types
+        uniformly without special-casing the ones that haven't
+        implemented a probe yet.
+
+        Returns:
+            Dict with:
+                probe_available: bool — True if the plugin knows how to
+                    query its upstream for capabilities.
+                granted: list[str] — the capabilities the credential
+                    actually grants (subset of the universe the plugin
+                    understands). Empty when ``probe_available=False``.
+                source: str — which endpoint / header the list came from;
+                    ``"unavailable"`` when no probe is wired.
+                reason: str | None — optional human-readable diagnostic
+                    when ``probe_available=False`` or when the call
+                    failed in a way that still produced a usable answer.
+        """
+        return {
+            "probe_available": False,
+            "granted": [],
+            "source": "unavailable",
+            "reason": "probe_not_implemented",
+        }
+
     def get_project_info(self) -> dict[str, Any]:
         """
         Return basic information about this project instance.