fix: sync uv.lock with pyproject.toml after python-deps bump

[caitlon]

Greptile Summary

This PR syncs uv.lock with pyproject.toml after a dependency bump and makes two related cleanups: the CI lock-file assertion is tightened from --frozen to --locked, and both MemberRole and AccessLevel enums are migrated from the older (str, Enum) mixin pattern to StrEnum.

• CI (ci.yml): All four uv sync --frozen calls are replaced with uv sync --locked. --frozen only requires the lockfile to exist; --locked additionally asserts it is consistent with pyproject.toml, so future dep bumps without a corresponding lockfile regeneration will now fail fast in CI.
• api/db/models.py & api/dependencies.py: MemberRole and AccessLevel are rewritten as enum.StrEnum / StrEnum, the idiomatic form since Python 3.11. Serialisation via Pydantic/SQLModel is unaffected because both forms expose the same .value strings to the ORM and JSON serialiser.

Confidence Score: 5/5

Safe to merge — all changes are additive improvements with no behavioral regressions on the API or data layer.

The CI change tightens lockfile enforcement without breaking any existing workflow. The StrEnum migration uses stdlib semantics that are identical to the old (str, Enum) mixin for Pydantic/SQLModel serialisation purposes; the only observable difference (str() representation) is not exercised anywhere in the changed or adjacent code. No logic, schema, or auth contract is altered.

No files require special attention.

Important Files Changed

Filename	Overview
.github/workflows/ci.yml	Replaces --frozen with --locked in all four uv sync invocations, making CI verify lockfile/pyproject.toml consistency instead of silently using a potentially stale lockfile.
api/db/models.py	Migrates MemberRole from (str, enum.Enum) to enum.StrEnum — idiomatic for Python 3.11+ and consistent with how Pydantic/SQLModel serialise enum values.
api/dependencies.py	Migrates AccessLevel from (str, Enum) to StrEnum; mirrors the models.py change and keeps the two enums consistent in style.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[uv sync in CI] --> B{flag used}
    B -- "--frozen (before)" --> C[Lockfile exists?\nYes → install from lockfile\nNo → fail]
    B -- "--locked (after)" --> D[Lockfile exists AND\nmatches pyproject.toml?\nYes → install\nNo → fail]

    E[Enum base class] --> F{pattern}
    F -- "str, Enum (before)" --> G["str(member) → 'ClassName.MEMBER'\nmember == 'value' → True\n.value → 'value'"]
    F -- "StrEnum (after)" --> H["str(member) → 'value'\nmember == 'value' → True\n.value → 'value'"]

Loading

_{Reviews (1): Last reviewed commit: "ci: enforce uv sync --locked to catch lo..." | Re-trigger Greptile}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
100.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud