axcient-v0.2.9

Security

• Go toolchain bumped to go1.26.6, which fixes GO-2026-6218 (quadratic
  complexity in net/url, reachable from cliutil.ProbeReachable). The
  previously released binary was built with go1.26.5 and carried the advisory.
  CI could not catch this: the workflows request go-version: "1.26", which
  resolves to the latest patched Go, so the security gate scanned a patched
  toolchain while the build honoured the pinned one. See issue #210.
• golang.org/x/text bumped v0.38.0 -> v0.39.0 for GO-2026-5970 (infinite
  loop on invalid input).