biscuit-python: Add version 0.4.0

[luhenry]

• Package: biscuit-python
• Version: 0.4.0
• Source: https://github.com/biscuit-auth/biscuit-python
• Docs: https://biscuitsec.org/usage/python

Compiles the PyO3 biscuit_auth extension (biscuit-auth 6.0.0, pure-Rust crypto) once per interpreter. Upstream publishes no riscv64 wheel.

Mirrors the linux and test jobs of upstream's test.yml.

Differs from upstream

• cibuildwheel instead of maturin-action - same maturin backend, riscv64 runner.

Matrix: cp312 and cp313 only - pyo3 0.24.1 caps CPython at 3.13, and upstream ships no cp314/cp314t either.

Testing

• same as upstream: biscuit_test.py plus the Sphinx doctests; the HTML docs build and mypy step are not wheel tests.

License: OK

Built on cp312 (x86_64 rehearsal); 20 passed, 65 doctests passed.

[luhenry]

Same mechanic as #3221/#3224/#3225: check_commit_messages (job 115855963528) failed on check_no_ai_attribution against the pull_request "opened" webhook's frozen body snapshot, captured before create_pull_request's auto-injected "Generated by Claude Code" footer was stripped via update_pull_request. The live PR body has been clean since right after creation.

pr-checks.yml already triggers on edited for exactly this case; that run (fired by the strip) is queued behind the backlog and should pass once it executes. No fix to push — watching for it to clear.

---

Generated by Claude Code