v1.9.3 — python 3.14 + dependency refresh + test CI

Changed

• Runtime bumped to Python 3.14 (python:3.14-slim) and dependencies refreshed to current majors: paramiko 5, py-key-value-aio 0.4.5, fastmcp 3.4.3. Each validated before merge — the exact APIs used by server.py/ssh_tools.py still resolve, all linux/cp314 wheels exist (incl. uvloop), and the test scripts pass on 3.12 and 3.14. No client-facing behaviour/API change; a maintenance & hardening refresh.
• CI actions pinned to current majors (checkout, buildx, login, metadata, build-push).

Added

• Real test signal on every PR and push (tests.yml): install pinned deps on the runtime Python + byte-compile + run the tests/ scripts. Previously PRs had no automated check (build.yml only builds/pushes the image).
• Dependabot patch auto-merge (dependabot-auto-merge.yml): patch-level PRs self-merge after an in-job gate (deps resolve + compile + test scripts + advisory pip-audit); minor/major stay open for manual review. Self-contained — no branch protection needed.

Fixed

• Test modules no longer hardcode an absolute local path on sys.path; app/ is resolved relative to each test file, so the suite runs in any checkout and in CI.