v0.16.4: login prompt fix for Typer 0.29

v0.16.4: login storage question works on Typer 0.29

Changed

• The CLI and MCP server reach shared core primitives only through the service layer. A new test fails on any direct core/ import, so the boundary stays enforced (#405).

Fixed

• Manual login reads cookies from Chrome DevTools "Copy as cURL" exports that pass them with -b or --cookie, including multiline input. Unrecognized input fails with a message naming the accepted formats (#403).
• nlm login asked the new-login plain-or-protected question with a Click range type. Typer 0.29 no longer accepts that type, so the question ended the command with a bare AssertionError, and Typer 0.26 to 0.28 stopped on an out-of-range answer instead of asking again. The question now reads the number itself and repeats with "Please enter 1 or 2." until the answer is valid. Enter still chooses protected (#406, #407).

Credits

Thanks to @renepf for the fix and regression tests in #407, and to @Zir0-93 for the layering audit in #405.