chore: release v0.16.0

[mostafa]

Summary

Release v0.16.0. Bumps the workspace from 0.15.0 to 0.16.0 (workspace package version plus all 17 inter-crate path pins across the six dependent crates), syncs both Cargo.lock and fuzz/Cargo.lock, and finalizes CHANGELOG.md by promoting the [Unreleased] block to [0.16.0] - 2026-06-15 with a TL;DR, a v0.15.0...v0.16.0 compare link, and the release reference link.

Headline framing: the "MCP server" release.

• MCP server: a new Model Context Protocol integration exposing the Sigma toolchain to AI agents.
  • rsigma-mcp crate and rsigma mcp serve (opt-in mcp feature): typed tools (parse, lint, validate, evaluate, convert, fix) plus field/backend/pipeline introspection and reference resources, with enrichment-aware evaluation (feat(mcp): add rsigma-mcp server with tools, resources, and enrichment #208).
  • Remote transport and config: Streamable HTTP (--http), constant-time bearer-token auth, in-process TLS, and a new mcp config section (feat(mcp): add Streamable HTTP transport, bearer auth, TLS, and config keys #209).
  • Smoke harness: scripts/mcp-smoke.py exercises every tool and resource over stdio and HTTP as a CI job (chore(mcp): add scripts/mcp-smoke.py end-to-end smoke harness #210).
  • Prerequisite refactor: the auto-fix applier, modifier/MITRE reference data, and the 75-rule lint catalogue move into rsigma-parser (refactor(parser): extract fix applier, reference data, and lint catalogue #207).
• backend convert per-rule file output when --output is a directory (feat(cli,fibratus): one rule file per rule for directory output #205).
• Configurable correlation state caps: --max-state-entries and a new per-group --max-group-entries (Configurable correlation state caps: --max-state-entries and per-group --max-group-entries #200).
• Fibratus conversion fixes: corrected process/thread field mappings and registry event scoping for Fibratus 3.0.0 (fix(convert,fibratus): Correct Fibratus field mappings #202).
• Correlation window-mode benchmarks plus a peak-memory stress target (Window-mode correlation benchmarks: throughput and peak-memory stress suite #199).
• rstix: data-model skeleton and common property containers with leaf-type serde (feat(rstix): add leaf serde and common property model #201).
• Dependency and security bumps: six Dependabot PRs and three RustSec PostgreSQL advisories (chore(deps): combined dependency updates #206).

Full release notes: see the new [0.16.0] section in CHANGELOG.md.

Test plan

• cargo fmt --all -- --check
• cargo metadata --locked for the workspace and fuzz/ (lockfile/manifest consistency)
• cargo clippy --workspace --all-targets --all-features -- -D warnings (CI)
• cargo test --workspace --all-features (CI)
• mkdocs build --strict (CI)
• cargo deny check (CI)

This commit is a version/changelog bump only; no source changed since the last merge to main, so the heavier gates are left to CI.

Post-merge

After merge, tag v0.16.0 on main and create the GitHub Release using the [0.16.0] body verbatim. The publish.yml (now including the new rsigma-mcp crate in the publish order), release-binaries.yml, and docker.yml workflows fire on release: published.