feat: sync SDK to OnePin API v0.41.155

[onepin-pipeline-bot]

Auto-regenerated from the shaped OnePin API OpenAPI spec.

• Spec commit: da90f167064000a4c5ff595855e1e266dfd43d8f
• Spec version: 0.41.155
• Trigger env: prod

The hand-rolled CLI under src/onepin/_cli/ is preserved via src/onepin/.fernignore.
Review the diff, let CI run, then merge to ship the new SDK surface.

[onepin-pipeline-bot]

Regen guards: failing. tests/build is red against the freshly generated SDK:

FAILED tests/build/test_sdk_contract.py::test_no_unexposed_sdk_params[workflows.list] - AssertionError: workflows.list: workflows.list accepts ['exclude_empty'] but the CLI has no flag for it. Either add an Opt(...) to the row in _spec.py, or record the decision in _INTENTIONALLY_UNEXPOSED with the reason.
FAILED tests/build/test_sdk_contract.py::test_no_unexposed_sdk_params[workflows.uploads] - AssertionError: workflows.uploads: workflows.list_workflow_uploads accepts ['category'] but the CLI has no flag for it. Either add an Opt(...) to the row in _spec.py, or record the decision in _INTENTIONALLY_UNEXPOSED with the reason.
FAILED tests/build/test_sdk_contract.py::test_no_unexposed_sdk_params[uploads.delete] - AssertionError: uploads.delete: uploads.delete accepts ['if_unreferenced'] but the CLI has no flag for it. Either add an Opt(...) to the row in _spec.py, or record the decision in _INTENTIONALLY_UNEXPOSED with the reason.

This does not block the PR -- the diff is here to fix forward from. ci.yml runs the same suite as a required check, so the merge is gated on it being green.

run log

[onepin-pipeline-bot]

Superseded by #134, which regenerates the SDK from a newer spec commit. Each regen PR is a full snapshot rather than an increment, so this one can only take the SDK backwards now. Closing and deleting the branch.