upstream pin freshness

[github-actions]

Upstream pin freshness

• SemConvSchemaVersion pinned at v1.43.0, latest release is v1.44.0
  • https://github.com/open-telemetry/semantic-conventions/releases/tag/v1.44.0
• SemConvGenAiRef pinned at f77b923, 18 commit(s) behind main (open-telemetry/semantic-conventions-genai)
  • open-telemetry/semantic-conventions-genai@f77b923...main
  • e771bc9 Bump the python-security group across 12 directories with 2 updates (#430)
  • b694ec3 Semconv to 1.44; Remove workarounds for core semconv as a dependency (#433)
  • 11658bb Rename gen_ai.workflow.duration to gen_ai.invoke_workflow.duration (#341)
  • 7e6e188 Pin the signal requirement level link to the upstream version (#436)
  • 4a39b6e Keep upstream doc links pinned to the version in model/manifest.yaml (#435)
  • 04702bc Warn that gen_ai.tool.description and gen_ai.tool.definitions may contain sensitive information (#431)
  • aa85df4 Track client token usage and operation duration in the reference report (#415)
  • 8c1b98a Allow conversation ID on workflow spans (#410)
  • 1d85c96 Lock file maintenance (#423)
  • 46d43c8 Run the reference scenarios under the conformance runner (#442)
• WeaverVersion current at v0.25.1 (open-telemetry/weaver)

One or more pins are behind upstream. Bumping is a deliberate change: re-run scripts/generate.sh, review the regenerated registry, and record the delta in qyl-references/REFERENCE-STATUS.md.