chore(release): 0.95.0

[soustruh]

Release 0.95.0

Eight changes since 0.94.0:

• feat(auth): kbagent project create -- agent provisioning (DMD-1940) #775 (DMD-1940): kbagent project create creates a new Keboola project from a machine with no Keboola account and no token. The stack must have the agent-provisioning feature.
• feat(auth): add "press c to copy" for the device-login link #772: the auth login device-code panel shows Press c to copy the link.
• fix(semantic-layer): derive dataset fqn from the table's Storage location (#761) #762 (semantic-layer: dataset fqn hardcodes a "KEBOOLA" database that does not exist in the project (add dataset / build) #761): semantic-layer add dataset and build take the dataset fqn from the table's real location in Storage, not from a "KEBOOLA" database that exists in no project. validate --deep warns about datasets that still have the old fqn.
• fix(release): re-enable the winget release job #763: the release pipeline publishes to WinGet again. The WinGet package stayed at 0.79.0.
• chore(deps): drop pip-audit, gate CI on uv audit, require uv >=0.12.15 (CLI-16) #768, chore(deps): bump anyio to 4.14.2 to clear the uv audit #781, chore(deps): relax uv required-version for Dependabot and document audit fixes #782, fix(test): make the _url_copy tests type-clean and machine-independent #773: housekeeping. The CI dependency audit uses uv audit instead of pip-audit, Dependabot can update uv.lock again, a dependency update clears an audit finding, and the _url_copy tests are type-clean.

This PR bumps the version to 0.95.0 and adds the changelog entry. It resolves the vNEXT doc tags to 0.95.0 and runs version-sync (plugin.json / marketplace.json / uv.lock). It also takes the gotchas.md update for #772 from the closed release PR #774. That update replaces the old device-login panel label and adds an entry for press c to copy. No whatsnew.ts entry: the release ships no UI-visible feature.

Plugin files changed: plugin.json, keboola-expert.md, gotchas.md, commands-reference.md, auth-workflow.md, semantic-layer-workflow.md.

make check, make vnext-check and make release-scope-check pass. make test-e2e did not run (no E2E credentials).

After merge: tag the merge commit v0.95.0 to trigger the release pipeline (PyPI + native binaries + GitHub Release).

[keboola-pr-reviewer-bot]

Verdict: auto_approve (risk 1/5) · profile keboola-mcp-server

Mechanical 0.95.0 release PR — version bump, one changelog entry, and vNEXT placeholder resolution, no behavior code.