#117 Release utcp-http 1.1.15, utcp-websocket 1.2.1

Release: utcp-http 1.1.15 and utcp-websocket 1.2.1 (#116).

Loopback hardening: a host chosen after registration can never be loopback (call-time rule), remote manuals and specs may not route the OAuth2 token POST at loopback, OpenAPI server variables resolve to their defaults, the WebSocket upgrade never follows a redirect, and WebSocket discovery applies the remote-loopback manual rule.

🤖 Generated with Claude Code