ReallyMe JOSE v0.4.4

• add opt-in typed compact-JWE raw DEFLATE compression with protected zip = "DEF"
• authenticate AES-GCM before bounded inflate and zeroize intermediate plaintext buffers
• expose explicit compression negotiation across Rust, Swift, Kotlin, TypeScript, and the protobuf boundary
• add positive, tamper, unsupported-algorithm, and decompression-limit vectors across every supported ECDH-ES curve and AES-GCM size
• update the pinned shared release-readiness policy to v0.6.7