fix(deps): update dependency tollbooth-dpyc to v0.65.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
tollbooth-dpyc	==0.65.0 → ==0.65.1

---

Release Notes

lonniev/tollbooth-dpyc (tollbooth-dpyc)

v0.65.1

Compare Source

Fixed — a rejected inline npub proof now says why, and the dpop_token shape is documented

A self-minted kind:27235 proof that was refused returned one opaque proof_invalid
"Invalid identity proof." — the real reason was computed and discarded at DEBUG, forcing
key-holding agents into guess-and-check. require_proof now surfaces a machine-readable
reason on the denial (malformed_json for a base64/NIP-98-wrapped token, tool_mismatch
— with expected_u naming the tool — when the u tag held the endpoint URL instead of the
tool name, plus signature_invalid / npub_mismatch / wrong_kind / expired / replayed).
The accept/reject logic is byte-for-byte unchanged — verify_proof(...) -> bool is now a
thin wrapper over the reason-returning _verify_proof_reason; only the explanation is added,
never what is accepted. Every dpop_token docstring now states the exact shape: raw JSON (not
base64, not NIP-98), a u tag holding this tool's exact name from tools/list (not the
endpoint URL), content:"", created_at within the freshness window, and a recommended
nonce. Closes tollbooth-dpyc#137 (reported by Scout).

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 06:59 AM, only on Monday (* 0-6 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[dpyc-agentic-desk]

✅ Deploy verified live: version 0.4.2, serving cdb26619 (matches the merge).