fix: align governance paths and trusted npm publish; bump mcp to 2.1.2#5

yinxulai merged 2 commits into

mainyinxulai/projitive:mainfrom

wipyinxulai/projitive:wipCopy head branch name to clipboard