docker/cagent v1.140.0 scopes MCP callbacks per request and adds eight lint cops encoding its own review comments.

The correctness change is request-scoped MCP callbacks for elicitation, sampling and OAuth via a new HandlerScope type, preventing cross-request callback collisions, plus safe MCP routing and multi-subscriber event delivery (GitHub). It also defers GatewayToolset temp-file creation to Start/Restart so secrets aren't written to disk until the subprocess launches. The eight lint rules encode things the team kept repeating in review: require tools.UnmarshalToolArguments over raw json.Unmarshal, reject branching on err.Error() string content, ban os.Stdout writes in pkg/ libraries, enforce the DOCKER_AGENT_ env prefix, require atomicfile.Write for marshalled state, flag bare &http.Client{} with no explicit Transport, sync the Toolset schema enum with DefaultToolsetCreators, and route state paths through pkg/paths. Turning repeated review comments into lint rules is the cheapest process improvement available to most teams.