fix(discovery): canonical pay invocations in skill.md (1.3.6) (#13)

## Summary

- `build_skill_md` per-rail compatibility notes referenced
`agentscore-pay --chain <chain>` as a usage hint, but `--chain` is a
flag of the `pay` / `balance` / `fund` subcommands, not a top-level
option. Bare `agentscore-pay --chain X` is not a valid invocation; the
canonical form is `agentscore-pay pay --chain X`.
- Corrects the `solana_mpp` note: previously claimed `X-Payment header
carries the signed credential`, but Solana MPP `solana/charge` carries
the credential in `Authorization: Payment` (same as Tempo MPP). Brings
the python skill.md output into parity with the node-commerce 1.3.3
sibling and matches the actual implementation.
- Normalizes the `x402_base` note to the same `agentscore-pay pay
--chain base` shape as the other rails (was bare `agentscore-pay`).
- Bumps to 1.3.6 with in-range dep refresh:

  ```
  markdown-it-py 4.0.0 -> 4.1.0
  pydantic       2.13.3 -> 2.13.4
  pydantic-core  2.46.3 -> 2.46.4
  ujson          5.12.0 -> 5.12.1
  ```

All top-level deps are already at the latest published version on PyPI
(httpx 0.28.1, x402 2.9.0, pympp 0.7.0, cdp-sdk 1.44.0).

## Test plan

- [x] `uv run ruff check .` clean
- [x] `uv run ruff format --check .` clean
- [x] `uv run ty check agentscore_commerce/` clean
- [x] `uv run pytest -q --no-cov` 724 pass / 3 skipped / 0 fail
- [x] Lefthook pre-commit (ruff) and pre-push (ty + vulture) both pass
- [ ] CI green
- [ ] Tag `v1.3.6` after merge to trigger PyPI trusted publish

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: vvillait88

agentscore_commerce/discovery/skill_md.py

@@ -164,11 +164,15 @@ class BuildSkillMdInput:
 
 _RAIL_NOTES: dict[str, str] = {
     "tempo_mpp": (
-        "USDC. Use `agentscore-pay --chain tempo` (or `tempo request`); "
+        "USDC. Use `agentscore-pay pay --chain tempo` (or `tempo request`); "
         "MPP credential goes in `Authorization: Payment`."
     ),
-    "x402_base": "USDC (EIP-3009). Use `agentscore-pay`; X-Payment header carries the signed credential.",
-    "solana_mpp": "USDC (SPL). Use `agentscore-pay`; X-Payment header carries the signed credential.",
+    "x402_base": (
+        "USDC (EIP-3009). Use `agentscore-pay pay --chain base`; X-Payment header carries the signed credential."
+    ),
+    "solana_mpp": (
+        "USDC (SPL). Use `agentscore-pay pay --chain solana`; MPP credential goes in `Authorization: Payment`."
+    ),
     "stripe": (
         "Card via Link wallet. Use `@stripe/link-cli` — `agentscore-pay` emits the "
         "handoff hint when this rail is picked."

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "agentscore-commerce"
-version = "1.3.5"
+version = "1.3.6"
 description = "Agent commerce SDK for Python — identity middleware (FastAPI, Flask, Django, AIOHTTP, Sanic, ASGI) + payment helpers + 402 builders + discovery + Stripe multichain. The full merchant-side toolkit for AgentScore-powered agent commerce."
 readme = "README.md"
 license = "MIT"