v0.4.4

Maintenance release: follows duho's 0.6.x ceiling bump and opts the CLI out
of duho's new MCP auto-launch by default — no other change to authkeys' own
behavior or public API.

Changed

• The duho requirement moves to its 0.6.x series: >=0.6.0,<0.7.0 (was
  >=0.5.0,<0.6.0). Ceiling-following bump, not a floor raise for a feature
  authkeys uses: the entire duho surface it imports — AUTO, Arg, Args,
  Choice, Cli, Cmd, LoggingArgs, app, main, print_completion and
  duho.logging — is unchanged by 0.6.0. The full test suite passes against
  the installed duho==0.6.0 wheel on Python 3.9 and 3.14.

Added

• Opted the whole CLI out of duho's MCP auto-launch. duho 0.6.0 makes
  every app()/main() call check AUTHKEYS_MCP=stdio and, when set,
  serve MCP tools instead of running the requested command. Authkeys (the
  CLI root) now declares _mcp_ = False, disabling that env trigger for the
  whole app: authkeys never listens for AUTHKEYS_MCP and always runs as
  a normal CLI. authkeys is a credentials tool — an MCP-exposed resolve/
  check would hand a caller a user's real authorized_keys content, and
  MCP-exposed serve would start a listener as the side effect of a single
  tool call — neither is a safe default here.

Full Changelog: v0.4.3...v0.4.4