feat: sync SDK to OnePin API v0.41.151

[onepin-pipeline-bot]

Auto-regenerated from the shaped OnePin API OpenAPI spec.

• Spec commit: a13dbaa5b545aaedb3547d956a25f2d62da5c5a9
• Spec version: 0.41.151
• Trigger env: prod

The hand-rolled CLI under src/onepin/_cli/ is preserved via src/onepin/.fernignore.
Review the diff, let CI run, then merge to ship the new SDK surface.

[onepin-pipeline-bot]

Regen guards: failing. tests/build is red against the freshly generated SDK:

FAILED tests/build/test_sdk_contract.py::test_no_unexposed_sdk_params[workflows.list] - AssertionError: workflows.list: workflows.list accepts ['exclude_empty'] but the CLI has no flag for it. Either add an Opt(...) to the row in _spec.py, or record the decision in _INTENTIONALLY_UNEXPOSED with the reason.

This does not block the PR -- the diff is here to fix forward from. ci.yml runs the same suite as a required check, so the merge is gated on it being green.

run log

[onepin-pipeline-bot]

Superseded by #132, which regenerates the SDK from a newer spec commit. Each regen PR is a full snapshot rather than an increment, so this one can only take the SDK backwards now. Closing and deleting the branch.