v0.4.4

What's Changed

• docs: encourage read-only mode by default by @gregnr in #94
• feat: tool descriptions to mitigate prompt injection by @gregnr in #95
• feat(prompt-injection): wraps execute_sql response + adds e2e test by @gregnr in #96
• fix: apply migration result by @gregnr in #97

Full Changelog: v0.4.3...v0.4.4