v0.4.8

Two fixes from this cycle, combined.

• A provider whose API key is invalid no longer wastes every routed turn. An auth failure (e.g. invalid ANTHROPIC_API_KEY → 401 invalid x-api-key) now blacklists that provider for the session and auto-reroutes the same message onto a provider whose key works — instead of the router re-recommending the dead provider every turn. Auth failures are no longer fed back to Minima as model-quality failures (they can't poison a model's success estimate). Keyless providers are dropped from routing up front; /reconnect clears the blacklist; pins are never auto-rerouted.
• Scroll-wheel and text selection/copy both work. Mouse capture is ON by default (wheel scroll + in-app drag-select); the terminal's native selection stays reachable by holding the bypass modifier while dragging (Option on macOS, Shift on Linux); and copy now also pushes to the OS clipboard (pbcopy/xclip/wl-copy), so it works on macOS Terminal.app (which ignores Textual's OSC-52-only copy). New /mouse [on|off] toggle + --no-mouse flag.
• /resume picker shows created + recently-used timestamps, sorted most-recently-used first.

Full notes in CHANGELOG.md.