Chore(deps-dev): Bump more-itertools from 11.0.1 to 11.0.2 (#1092)

Bumps [more-itertools](https://github.com/more-itertools/more-itertools) from 11.0.1 to 11.0.2.
- [Release notes](https://github.com/more-itertools/more-itertools/releases)
- [Commits](more-itertools/more-itertools@v11.0.1...v11.0.2)

---
updated-dependencies:
- dependency-name: more-itertools
  dependency-version: 11.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

feat: authenticated IPFS uploads via /api/v0/ipfs/add_file (#1110)

Extends `POST /api/v0/ipfs/add_file` to accept a signed STORE message in the multipart form, mirroring `/storage/add_file`. Users can now upload and anchor an IPFS pin in a single request, rather than pinning via the unauthenticated endpoint and submitting a STORE message separately.

Also adds an explicit size limit to the existing unauthenticated mode (was relying on aiohttp's default only) and rationalizes post-pin error handling so no failure mode leaves an orphaned pin on the local IPFS daemon.

build: install git only in builder stage (#1115)

`git` is needed at build time to clone the `aleph-p2p-client` git URL dependency, but not at runtime. Move it from the shared `base` stage into the `builder` stage so the final runtime image doesn't ship git.

Also explicitly install `patch` in the final stage: it was previously pulled in transitively as a Recommends of git, and is needed for the openssl.cnf legacy-providers patch step. Without this, removing git also removed patch and the build failed at the patch step.

feat: add filters and sorting to /credit_history endpoint (#1099)

* feat: add filters and sorting to /credit_history endpoint

Add has_expiration boolean filter, exclude_payment_method list filter,
and configurable sort_by/sort_order with cursor pagination support.

* fix: address PR review - cursor sort_order, nullable columns cleanup

- Add sort_order to cursor encoding/decoding to prevent incorrect
  pagination when switching between ASC/DESC directions
- Remove payment_method from _NULLABLE_SORT_COLUMNS (always has a value)
- Add comments explaining why NULL inclusion is correct in keyset pagination
- Add cursor pagination test verifying NULLs appear correctly across pages

chore: bump aleph-message to 1.1.1 (#1108)

feat: add POST /api/v0/price/estimate/instance endpoint (#1088)

Simplified cost estimation endpoint that accepts InstanceContent directly
instead of requiring a full Aleph message wrapper. Useful for UIs and
tools that want to compute instance costs before message submission.

fix: treat GPU tier compute units as a lower bound, not exact value (#…

…1091)

GPU tier compute_units values were used as the exact CU count,
ignoring the VM's actual resource demands. Now resource-based CUs
(from vCPUs/memory) are computed and the higher of the two is used,
making the GPU tier value a minimum rather than a ceiling.

feat: make storage upload limits configurable (#1090)

Make MAX_FILE_SIZE and MAX_UNAUTHENTICATED_UPLOAD_FILE_SIZE configurable
via the storage config section so testnets can raise them.

- Add storage.max_file_size (default 100 MiB) and
  storage.max_unauthenticated_upload_file_size (default 25 MiB) config entries
- Inject limits via constructor into StoreMessageHandler, BalanceCronJob,
  and CreditBalanceCronJob
- Read limits from config in storage controller route handlers
- Fix client_max_size bug (was 64 MiB, below the 100 MiB upload limit)
- Rename constants to DEFAULT_MAX_FILE_SIZE / DEFAULT_MAX_UNAUTHENTICATED_UPLOAD_FILE_SIZE

Chore(deps-dev): Bump pytest from 9.0.2 to 9.0.3 (#1083)

Bumps [pytest](https://github.com/pytest-dev/pytest) from 9.0.2 to 9.0.3.
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.2...9.0.3)

---
updated-dependencies:
- dependency-name: pytest
  dependency-version: 9.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

fix: use package version in OpenAPI doc (#1051)