anymd 8.5.5

Patch Changes

• With --allow-dir or MCP_PDF_ALLOWED_DIRS set, every tool now refuses a local path outside those directories before opening it. pdf_compare was the one entrypoint that reached the comparison without that check; it now applies the same check as read, search and inspect, and a comparison of files inside the allowed directories is unchanged. A video subtitle sidecar is admitted before it is read.
• Dependencies: zip 9.0.5, calamine 0.37, chacha20 0.10.2. No behaviour change.