Serve /.well-known/glama.json and /llms.txt
Glama.ai's Connector listing requires glama.json to be served at
/.well-known/glama.json to verify server ownership -- confirmed missing in
production (nginx access log showed Glama's crawler getting a 404 there).
Also adds llms.txt (the llmstxt.org convention),
served at /llms.txt, following the same pattern. Both are unauthenticated
routes, same as the existing /.well-known/mcp/server-card.json//healthz/
/status routes -- no change to /mcp's auth behavior. See #14.
Dependencies
Bumps pyzotero 1.13.4 -> 1.13.6 (#13).