feat: try python 3.14 - #214

The actions actions/checkout@v4.1.7, actions/setup-python@v5.2.0, and liskin/gh-problem-matcher-wrap@v1 are not allowed in vinitkumar/json2xml because all actions must be pinned to a full-length commit SHA.