v1.105.3

## Verify Docker Image Signature

All LiteLLM Docker images are signed with [cosign](https://docs.sigstore.dev/cosign/overview/). Every release is signed with the same key introduced in [commit `0112e53`](https://github.com/BerriAI/litellm/commit/0112e53046018d726492c814b3644b7d376029d0).

**Verify using the pinned commit hash (recommended):**

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

```bash
cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.105.3
```

**Verify using the release tag (convenience):**

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

```bash
cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.105.3/cosign.pub \
  ghcr.io/berriai/litellm:v1.105.3
```

Expected output:

```
The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key
```

---
## What's Changed
* fix(mcp): backport per-user auth MCP tool listing to stable/1.105.x by @yuneng-berri in https://github.com/BerriAI/litellm/pull/47804
* fix(count_tokens): backport Bedrock Mantle count_tokens fallback to stable/1.105.x by @mateo-berri in https://github.com/BerriAI/litellm/pull/47744
* chore(backport): billing fixes for LIT-145 and aiohttp 3.14.4 onto stable/1.105.x (1.105.3) by @kerry-berri in https://github.com/BerriAI/litellm/pull/47714
* fix(batches)!: backport P0 batch-cost, pricing and translation fixes to stable/1.105.x for v1.105.3 by @mrinal-berri in https://github.com/BerriAI/litellm/pull/47737


**Full Changelog**: https://github.com/BerriAI/litellm/compare/v1.105.2...v1.105.3