- Pins the `dotenv` package to `16.6.1` to prevent the promotional message from being printed to the console during startup, which could interfere with STDIO-based MCP clients.
- Adds `dotenv` to the `.ncurc.json` reject list to prevent future automatic upgrades to problematic versions.
- Updates the CHANGELOG to document this fix.