Prepare 0.6.5 release

[skvark]

Release scope

Prepare the root githits 0.6.5 release across npm, Open Plugin, Claude, Gemini, and the official MCP registry manifest.

@githits/mcp remains at 0.6.3 because no packages/mcp/** source, package API, schema, tool behavior, instruction, or remote-server-facing type changed.

User-visible changes since 0.6.4

• Fix automatic login refresh so normal access-token expiry remains noninteractive (Fix silent auth refresh and prepare 0.6.5 release #232).
• Preserve recoverable credentials across refresh transport, timeout, and server failures; later calls retry automatically (Fix silent auth refresh and prepare 0.6.5 release #232).
• Support fixed OAuth callback ports for SSH port-forwarding and constrained remote environments (fix: support SSH callback ports in init #230).
• Refresh runtime and workflow dependencies (chore(deps): refresh runtime and workflow dependencies #231).

Validation

• bun test — 2504 passed
• bun run typecheck
• bun run lint — no errors; one pre-existing non-null assertion warning
• bun run build
• bun run validate:packages
• source CLI unauthenticated smoke
• source MCP registration smoke
• built CLI unauthenticated smoke
• built MCP registration smoke
• authenticated live CLI/MCP smoke reached the backend; later example calls were rate-limited with HTTP 429, unrelated to authentication
• mcp-publisher v1.7.9 checksum verification and server.json registry validation
• MCP registry domain proof returned 200
• OAuth protected-resource metadata returned 200
• unauthenticated remote MCP initialize returned 401 with the expected resource_metadata challenge

Merging this PR triggers the root release workflow after the successful Main workflow on main. That workflow publishes githits@0.6.5, the v0.6.5 GitHub release, and com.githits/githits@0.6.5 in the MCP registry.