v0.9.11 Maintenance Release

This maintenance release adds Firefox authentication fallback support and fixes serialized list parameters sent by MCP clients.

Added

• nlm login can use an isolated Firefox profile when Chromium/CDP is unavailable.
• Chromium-family browsers remain preferred when available.

Fixed

• Firefox login now requires --force before replacing an existing saved profile because Firefox cookie extraction cannot verify the Google account.
• MCP list parameters now accept real lists, JSON strings, and comma-separated strings wherever the tool already normalizes them with coerce_list().

Thanks

• Thanks to @LucasMazei for PR #295 and the Firefox authentication fallback.
• Thanks to @GuanHukd for the detailed reproduction and call-site inventory in issue #296.

Verification

• Full test suite: 1,410 passed, 39 skipped.
• Focused MCP and authentication regression suites passed.
• Ruff lint and formatting checks passed.