feat: SDK update for version 23.0.0

[ChiragAgg5k]

This PR contains updates to the SDK for version 23.0.0.

What's Changed

• Breaking: removed account.createJWT; use users.createJWT instead. A leaked JWT could mint further JWTs, letting a credential outlive its own expiry — a session cannot duplicate itself to live forever either
• Breaking: removed project.createKey. A leaked key could mint further hidden keys, making a compromise far harder to contain and revoke
• Breaking: activities.listEvents queries now takes an array instead of a string
• Added: embeddings service with createTextEmbeddings, plus the EmbeddingModel enum
• Added: TablesDB migration methods listMigrations, createMigration, getMigration, deleteMigration, cutoverMigration, and listOperations
• Added: proxy.createInvalidation for purging cached edge responses, plus the InvalidationType enum
• Added: apps.deleteInstallation
• Added: users.getMFAChallenge and the MfaChallengeSecret model
• Added: project.updateMFAFactorsPolicy and the PolicyMfaFactors model
• Added: client.setOrganization for organization-scoped requests
• Added: folder parameter to storage.createFile
• Added: syncMode parameter to tablesDB.create and tablesDB.update, and specification to tablesDB.update
• Added: installationScopes parameter to project.updateOAuth2Server
• Added: custom authentication factor, node-26 runtime, mfa-factors project policy, and the embeddings.write and proxy.invalidations.write key scopes
• Updated: response format to 1.9.6

[greptile-apps]

Greptile Summary

The PR updates the Python SDK to API version 23.0.0 and response format 1.9.6.

• Adds embeddings, proxy invalidation, TablesDB migration, MFA, application, and project-policy APIs.
• Updates generated models, enums, service methods, examples, and tests for the new API contract.
• Migrates package publishing to PyPI trusted publishing and adds a manual release workflow.

Confidence Score: 3/5

The PR is not safe to merge until manual publishing is restricted to an approved immutable release tag.

The workflow still passes an unrestricted manual input directly to checkout and then unconditionally builds and publishes that revision using the repository’s PyPI identity.

Files Needing Attention: .github/workflows/publish.yml

Important Files Changed

Filename	Overview
.github/workflows/publish.yml	Adds manual OIDC-backed publishing, but the previously reported unrestricted-ref release-integrity issue remains.
appwrite/client.py	Updates SDK and response-format headers and adds organization-scoped request configuration.
appwrite/models/document.py	Reworks generic document payload serialization through a Pydantic wrap serializer.
appwrite/services/tables_db.py	Adds database migration operations and expands database creation and update parameters.
appwrite/services/embeddings.py	Introduces the embeddings service and text-embedding request support.

_{Reviews (4): Last reviewed commit: "chore: merge main into dev for the relea..." | Re-trigger Greptile}