[mrgh97]

Forge Msgs 2.0.0 constrains Pillow below 13, preventing downstream nodes from installing the security-fixed release. Require pillow>=13.0.0,<14, update the frozen resolution, and prepare Msgs 2.0.1 with synchronized Python/Rust/C++ family metadata. Arrow schemas, the v1 wire interface, and runtime APIs remain unchanged.

Add codec regression coverage for RGB/grayscale JPEG, PNG and WebP, strided arrays, malformed bitstreams, BGR carrier data, and exact raw-depth round trips. Update both English and Chinese root READMEs with the dependency compatibility requirement.

Validation:

• Complete Python suite: 920 passed; Ruff, schema validation and package-family version gate passed.
• Rust workspace: 137 passed; 12 Python wheel/sdist archives built and validated.
• Prior Pillow compatibility verification: Python 3.11/3.12 message suites passed; 18 cross-version codec reads passed; candidate Pillow audit found no known vulnerabilities.
• GitHub Linux CI: Python, Rust and C++ jobs all passed (including Python/C++ Arrow interoperability and C++ Dora compile checks).
• Standalone dora run does not apply to a library package. Real Dora 1.0.1 integration with adapter-forge-gateway passed using this local Msgs 2.0.1 candidate and Pillow 13.0.0: JPEG color and float32-depth messages reached Gateway, HTTP health and WebSocket state/images checks passed, image dimensions/channel values were checked, and the graph exited with code 0 after 10 seconds. This is a short software smoke test, not sustained-run or hardware acceptance.
• Fresh auxiliary integration environments initially exposed Gateway servicing stalls. The bounded native receive adapter in Gateway PR #15 resolved the reproduced case; the same fresh environment then passed with Msgs 2.0.1 / Pillow 13.0.0. Earlier failures remain in the local report history. This is not a sustained-run stability claim.

This is a source PR, not a package release or completed downstream/hardware acceptance. Consumers pinning Pillow below 13 must update their constraints. No stable tag or GitLab synchronization is performed.