v1.28

What's Changed

• Add interactive tutorials via pytorial by @dbosk in #95
• Explain Scopus's untranslatable-query 400 as an Elsevier-side refusal by @dbosk in #86
• Request Scopus's COMPLETE view when entitled; fix surname-first author names by @dbosk in #97
• Let Scopus enrich papers by DOI where it serves the COMPLETE view by @dbosk in #102
• Keep the affiliations that providers report by @dbosk in #103
• Try every PDF source of a DOI instead of only the first by @dbosk in #101
• Bump the uv group across 1 directory with 4 updates by @dependabot[bot] in #104
• Bump the uv group across 1 directory with 2 updates by @dependabot[bot] in #127
• WP1: merge concurrent session saves (fixes #107), atomic writes with .bak, all-or-nothing export, safe notes file by @dbosk in #117
• WP2: record provider failures as failed, DBLP anti-bot detection and retry, Scopus empty sets, venue invariant by @dbosk in #116
• WP3: one category per classified paper, status wins in the audit table, decide --confidence, one cite-key scheme by @dbosk in #115
• WP4: offline tests, one rate limiter for every client, --proxy and scholar's own User-Agent by @dbosk in #118
• cache clear keeps paid LLM caches (and really clears), TUI drops legacy decision files, api_key=None documented by @dbosk in #124
• DBLP onto the shared rate limiter and network layer; drop DBLP homonym numbers (stacked on #116 + #118) by @dbosk in #125

Full Changelog: v1.26...v1.28