Update some crates, allow zizmor usage, fix beads installation

.beads/.gitignore

@@ -2,6 +2,12 @@
 dolt/
 dolt-access.lock
 
+# Credential key (machine-specific secret, never commit)
+.beads-credential-key
+
+# Embedded Dolt runtime directory (auto-created, machine-specific)
+embeddeddolt/
+
 # Runtime files
 bd.sock
 bd.sock.startlock

.claude/settings.local.json

@@ -63,7 +63,8 @@
       "Bash(ECTO_LIBSQL_BUILD=true mix compile:*)",
       "Bash(ECTO_LIBSQL_BUILD=true mix run:*)",
       "Bash(ECTO_LIBSQL_BUILD=true mix test:*)",
-      "Bash(MIX_ENV=test ECTO_LIBSQL_BUILD=true mix compile:*)"
+      "Bash(MIX_ENV=test ECTO_LIBSQL_BUILD=true mix compile:*)",
+      "Bash(zizmor)"
     ],
     "deny": [],
     "ask": []

.github/workflows/ci.yml

@@ -112,12 +112,14 @@ jobs:
           echo "All fuzz tests passed!"
 
   elixir-tests-latest:
-    name: Elixir 1.18.0 / OTP 27.0 / ${{ matrix.os }}
+    name: Elixir ${{ matrix.elixir }} / OTP ${{ matrix.erlang }} / ${{ matrix.os }}
     runs-on: ${{ matrix.os }}
     strategy:
       fail-fast: true
       matrix:
         os: [ubuntu-latest, macos-latest]
+        elixir: ["1.19.5"]
+        erlang: ["28.0"]
 
     steps:
       - name: Checkout code
@@ -158,9 +160,9 @@ jobs:
           path: |
             deps
             _build
-          key: ${{ runner.os }}-mix-1.18.0-27.0-${{ hashFiles('mix.exs', '**/Cargo.toml') }}
+          key: ${{ runner.os }}-mix-${{ matrix.elixir }}-${{ matrix.erlang }}-${{ hashFiles('mix.exs', '**/Cargo.toml') }}
           restore-keys: |
-            ${{ runner.os }}-mix-1.18.0-27.0-
+            ${{ runner.os }}-mix-${{ matrix.elixir }}-${{ matrix.erlang }}-
 
       - name: Install Mix dependencies
         run: mix deps.get
@@ -184,13 +186,15 @@ jobs:
         run: mix test
 
   elixir-tests-compatibility:
-    name: Elixir 1.17.0 / OTP 26.2 / ${{ matrix.os }}
+    name: Elixir ${{ matrix.elixir_otp }} / OTP ${{ matrix.erlang }} / ${{ matrix.os }}
     runs-on: ${{ matrix.os }}
     needs: [elixir-tests-latest]
     strategy:
       fail-fast: true
       matrix:
         os: [ubuntu-latest, macos-latest]
+        erlang: ["27.0"]
+        elixir_otp: ["1.18.0-otp-27"]
 
     steps:
       - name: Checkout code
@@ -207,14 +211,14 @@ jobs:
         uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
         with:
           path: ~/.local/share/mise
-          key: mise-compat-${{ runner.os }}-${{ runner.arch }}-erlang-26.2-elixir-1.17.0
+          key: mise-compat-${{ runner.os }}-${{ runner.arch }}-erlang-${{ matrix.erlang }}-elixir-${{ matrix.elixir_otp }}-${{ hashFiles('mise.toml') }}
           restore-keys: |
             mise-compat-${{ runner.os }}-${{ runner.arch }}-
 
       - name: Install Erlang and Elixir via mise
         run: |
-          mise install erlang@26.2 elixir@1.17.0-otp-26
-          mise use erlang@26.2 elixir@1.17.0-otp-26
+          mise install erlang@${{ matrix.erlang }} elixir@${{ matrix.elixir_otp }}
+          mise use erlang@${{ matrix.erlang }} elixir@${{ matrix.elixir_otp }}
           mise reshim
           echo "$HOME/.local/share/mise/shims" >> "$GITHUB_PATH"
 
@@ -232,9 +236,9 @@ jobs:
           path: |
             deps
             _build
-          key: ${{ runner.os }}-mix-1.17.0-26.2-${{ hashFiles('mix.exs', '**/Cargo.toml') }}
+          key: ${{ runner.os }}-mix-${{ matrix.elixir_otp }}-${{ matrix.erlang }}-${{ hashFiles('mix.exs', '**/Cargo.toml') }}
           restore-keys: |
-            ${{ runner.os }}-mix-1.17.0-26.2-
+            ${{ runner.os }}-mix-${{ matrix.elixir_otp }}-${{ matrix.erlang }}-
 
       - name: Install Mix dependencies
         run: mix deps.get