Take agentscore-py 2.6.0

[vvillait88]

Summary

Raises the agentscore-py floor from >=2.5.2 to >=2.6.0, which is the release adding the optional refreshable field to CredentialItem. Nothing in this library reads that field, so this is a floor bump rather than a behavior change.

The old floor already resolved 2.6.0, so this does not change what a fresh install gets today. It states the intended baseline explicitly instead, which is what stops a consumer pinning an older SDK and getting a shape this library was not tested against. Matches the node-commerce change.

Patch bump to 2.5.14.

Type of change

• Bug fix (no breaking change)
• New feature (no breaking change)
• Breaking change (existing callers must update)
• Docs, tests, or internal maintenance only

Public API

None. No exported type, signature, or wire-format change in this package. The SDK's own addition is NotRequired, so nothing re-exported through here changes shape.

A consumer already on agentscore-py < 2.6.0 will now resolve an upgrade rather than stay put. That upgrade is itself additive.

Test plan

uv run pytest (1841 pass, 4 skipped, 95.36% against a 95% floor), uv run ruff check, and uv run ty check all clean with 2.6.0 installed. uv sync --all-extras --all-groups used throughout so extras and dev groups resolve.

Checklist

• Tests cover the new behavior, and the suite passes locally
• Lint, format, and type checks pass
• Docs and README examples updated if the public surface changed
• No secrets, credentials, or personal data in the diff or the tests