#250 chore(deps): grouped updates for stackone-ai-python (3 packages)

Groups three green, non-security Dependabot PRs into one.

PR	Update
#247	hono 4.13.13 to 4.13.14 (mock server, patch)
#237	actions/checkout 6.0.2 to 7.0.1
#236	astral-sh/setup-uv 10.3.0 to 10.3.3 (actions group)

Checks

• All three merge into main without conflicts. The action SHAs match their upstream tags.
• checkout v7 refuses fork PR checkout under pull_request_target and workflow_run. No workflow here uses either trigger.
• Local run, main vs this branch, same commands as CI (Python 3.13): uv sync --all-extras --locked, pnpm install --frozen-lockfile and uv run pytest pass on both, with 871 tests passing on both.

When this merges, #247, #237 and #236 can be closed as included.

Requested by guillaume@stackone.com, Security Autopilot run sa-2026-11-04-b5bf0d5d.

🤖 Generated with Claude Code

---

Summary by cubic

Groups three non-security Dependabot updates into one PR: hono 4.13.13→4.13.14, actions/checkout 6.0.2→7.0.1, and astral-sh/setup-uv 10.3.0→10.3.3.

• actions/checkout v7 is a major version that refuses fork PR checkouts under pull_request_target and workflow_run triggers; no workflow in this repo uses either.
• Verified locally against main: uv sync --all-extras --locked, pnpm install --frozen-lockfile, and uv run pytest all pass with 871 tests.
• Once merged, the three source Dependabot PRs can be closed as included.