2.8.0

## What's Changed
* fix(web): only DANGEROUSLY_OMIT_AUTH=true/1 disables /api auth by @cliffhall in https://github.com/modelcontextprotocol/inspector/pull/2390
* fix: stamp Mcp-Method on modern-era notification POSTs by @cliffhall in https://github.com/modelcontextprotocol/inspector/pull/2392
* fix: detach the OIDC compat's normal-path body releases by @cliffhall in https://github.com/modelcontextprotocol/inspector/pull/2393
* fix: resolve local $refs before choosing form widgets (#2321) by @cliffhall in https://github.com/modelcontextprotocol/inspector/pull/2391
* feat: per-server setting to suppress the standalone GET notification stream by @cliffhall in https://github.com/modelcontextprotocol/inspector/pull/2394
* fix(core): reframe the type-union lint as a portability trade by @cliffhall in https://github.com/modelcontextprotocol/inspector/pull/2395
* docs: document read-only mcp.json interoperability for external tooling by @cliffhall in https://github.com/modelcontextprotocol/inspector/pull/2396
* Run skills:eval through the GitHub Copilot CLI by @cliffhall in https://github.com/modelcontextprotocol/inspector/pull/2398
* Make the testing → test-servers hand-off fire under Copilot on the pagination prompt by @cliffhall in https://github.com/modelcontextprotocol/inspector/pull/2402
* docs: re-align the H2 2026 roadmap with the published MCP roadmap and official extensions by @cliffhall in https://github.com/modelcontextprotocol/inspector/pull/2401
* chore: add the project LICENSE and point every manifest at it by @cliffhall in https://github.com/modelcontextprotocol/inspector/pull/2449
* docs: add the security-advisory skill, and reconcile the two rules it contradicts by @cliffhall in https://github.com/modelcontextprotocol/inspector/pull/2444
* feat: MCP_INSPECTOR_SECRET_KEY_FILE, and document secret storage for every runtime by @cliffhall in https://github.com/modelcontextprotocol/inspector/pull/2448
* docs(skills): stop board lookups from trusting item-list --limit by @cliffhall in https://github.com/modelcontextprotocol/inspector/pull/2452
* chore: bump version to 2.8.0 (release step 1) by @cliffhall in https://github.com/modelcontextprotocol/inspector/pull/2454
* chore(release): merge v2/main into main for v2.8.0 by @cliffhall in https://github.com/modelcontextprotocol/inspector/pull/2456


**Full Changelog**: https://github.com/modelcontextprotocol/inspector/compare/2.7.0...2.8.0
Smoke test ledger for milestone branch: [v2/chore/milestone-merge-v2.8.0](https://claude.ai/artifact/YLGV4sYUwwRwusNNgPZPFF) 

## Thanks for helping us improve

This release addresses issues reported by these community members. Thank you for taking the time to file them:

* @aliengineering-byte (#1912)
* @Hritik003 (#2385)
* @mulezi1029 (#2321)
* @Navesz (#2406)
* @sbguangha (#2331)