build: update docker image for python fixes (and hopefully sqlite)
doc: changes.
build(release): prep for 2.6.0 release
build: add zizmore scanning for GH issues.
build: gha-update update github actions and pin to hashes.
build: commit fixes after auditing workflows with zizmor
build: have dependabot wait a week before updating github-actions.
test: try to make experimental test failure not fail the build again.