Take agentscore-py 2.6.4 and routine deps, bump to 2.5.18

Raises the SDK floor to the version just published, plus stripe 15.5.0,
trio 0.34.0, and ty 0.0.70. Holds x402 at 2.18.0: it is a wire-contract
package on the settle path, and the hold registry requires protocol-field
evidence (maxAmountRequired / x402Version / decimals byte-diff) before it
moves, which is its own deliberate pass rather than a routine bump.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: vvillait88

pyproject.toml

@@ -4,15 +4,15 @@ build-backend = "hatchling.build"
 
 [project]
 name = "agentscore-commerce"
-version = "2.5.17"
+version = "2.5.18"
 description = "Agentic commerce SDK for Python: identity middleware (FastAPI, Flask, Django, AIOHTTP, Sanic, ASGI) + payment helpers + 402 builders + discovery + Stripe multichain. The full merchant-side toolkit for AgentScore-powered agentic commerce."
 readme = "README.md"
 license = "MIT"
 requires-python = ">=3.11"
 keywords = ["agentscore", "agent-commerce", "agentic-payments", "402", "x402", "mpp", "machine-payments-protocol", "fastapi", "starlette", "flask", "django", "aiohttp", "sanic", "middleware", "trust", "reputation", "kyc", "identity", "stripe", "tempo", "solana", "base", "ai-agent"]
 dependencies = [
     "httpx>=0.25.0,<1.0.0",
-    "agentscore-py>=2.6.2",
+    "agentscore-py>=2.6.4",
 ]
 classifiers = [
     "Development Status :: 5 - Production/Stable",