Release 2.8.2 (#113)

## Summary

Release 2.8.2. This publishes the 2026-10-22 maintenance sweep (#112):

- ty 0.0.90
- setup-uv v10.3.2
- uv 0.13.5
- pypi-publish v1.14.3

Two of those are security fixes:
- **pypi-publish 1.14.3:** fixes GHSA-5xjx-3w67-w9x9, a critical CA
problem in the Sigstore chain that Trusted Publishing relies on. This
release is the first one published with it.
- **uv 0.13.4 and later:** fixes GHSA-hq85-5cpj-mr62, the compromised
emSign roots.

The source and runtime dependencies are unchanged, including the
`certifi>=2026.10.19` floor.

Worked with Varun.

## Type of change

- [ ] Bug fix (no breaking change)
- [ ] New feature (no breaking change)
- [ ] Breaking change (existing callers must update)
- [x] Docs, tests, or internal maintenance only

## Public API

Unchanged.

## Test plan

- `uv lock` moves only the project's own version.
- #112's gates ran on the same tree: ruff check, ruff format, ty,
vulture, pytest (172 passed) and osv-scanner all pass.

## Checklist

- [ ] Tests cover the new behavior, and the suite passes locally (no new
behavior)
- [x] Lint, format, and type checks pass
- [ ] Docs and README examples updated if the public surface changed
(the public surface did not change)
- [x] No secrets, credentials, or personal data in the diff or the tests

Author: vvillait88

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "agentscore-py"
-version = "2.8.1"
+version = "2.8.2"
 description = "Python client for the AgentScore APIs"
 readme = "README.md"
 license = "MIT"