v0.13.0

Removed

• Remove the inert server-side confirmation machinery: the needs_confirmation
  helper (and its django_ag_ui.policy.auto_confirm module) and the
  AUTO_CONFIRM setting / AppSettings.auto_confirm field. These never gated
  anything — server-side tools execute mid-stream, so @tool(destructive=True)
  only ever reached the LLM as an x-destructive schema hint, never a runtime
  gate. Per-tool destructive= / confirm= metadata and the x-destructive /
  x-confirm schema stamps are unchanged (they remain LLM/client hints, and the
  web component still gates client-registered tools). A real server-side gate is
  planned separately (a ToolGuard + typed ask_user mechanism).
  Breaking: the needs_confirmation export and the AUTO_CONFIRM setting are
  gone; a project that set AUTO_CONFIRM should drop it (it was a no-op).