hubcommander: dependencies resolved clean

python -m pip install --dry-run --disable-pip-version-check --no-input --report report.json . finished with exit 0 in 12 seconds, resolving 20 packages.

We cloned the repository at commit 35abf3880b48 from its setup.py and ran it under sandbox-exec -- (deny default) after importing the base BSD profile, reads allowed only under the system and toolchain paths and the scratch directory, writes confined to that scratch directory, the environment replaced with env -i, and lifecycle scripts disabled. The user's home directory is on no allow list. Python 3.14.6, pip 26.1.2. Nothing was installed and nothing was executed from the project: pip was asked to resolve the dependency set and report it, which is an observation about that day and that toolchain and nothing more.