v0.44.0

Release version 0.44.0

Drive gains a Touch ID-authorised backup lease that every Sheets/Docs write
verb now requires (#1664, ADR-0080), with a fail-closed audit log
(`log --audit`), `lease restore`/`release`/`prune`, and global lease
settings. `drive sheets` gains a large set of new verbs: charts and slicers,
pivot tables, conditional formats, filters and filter views, named ranges,
banding, dimension groups, data validation, sort, find/replace, auto-fill,
text-to-columns, cut/copy/paste and more.

New `ai jev` commands wrap TypeSafe AI's Jev judgment API (#1760, #1779):
the choice/score/noul/ask primitives, `route` (per-issue model-tier
advice across combinable ladders), and `verify-decision`.

The sessions service now tracks Codex (hooks, rollout watcher and
`codex-wrap`) and pi.dev sessions alongside Claude Code, with pid-based
liveness and more Claude Code hook events. Gmail gains draft
list/show/create/update and `gmail insert`.

BREAKING: the AI backend flags, `--instance` and `-C/--repo` are no longer
root-global and must follow the subcommand that reads them (#1778);
`drive sheets append`/`clear` JSON statuses now name the verb (#1941);
`ai jev route` effort advice is opt-in.

See CHANGELOG.md for the full list of changes.