v0.9.5

## What's Changed
* chore: remove dead entities endpoints and unused sync components by @felixschmetz in https://github.com/airweave-ai/airweave/pull/1488
* ci: add mypy type checking and ruff lint to CI pipeline by @orhanrauf in https://github.com/airweave-ai/airweave/pull/1505
* feat: add missing FK indexes, unique constraints, and cleanup orphaned DAG tables by @orhanrauf in https://github.com/airweave-ai/airweave/pull/1506
* chore: enable Dependabot for automated dependency updates by @orhanrauf in https://github.com/airweave-ai/airweave/pull/1510
* chore: pin GH Actions to commit SHAs by @hiddeco in https://github.com/airweave-ai/airweave/pull/1523
* chore: SHA-pin Docker base images by @hiddeco in https://github.com/airweave-ai/airweave/pull/1515
* ci: add CodeQL scanning workflow by @hiddeco in https://github.com/airweave-ai/airweave/pull/1524
* chore: add `deps:` labels for Dependabot by @hiddeco in https://github.com/airweave-ai/airweave/pull/1531
* ci: add gitleaks secret scanning by @hiddeco in https://github.com/airweave-ai/airweave/pull/1529
* ci: skip secret-dependent jobs on PRs by @hiddeco in https://github.com/airweave-ai/airweave/pull/1528
* chore(deps): bump the actions group across 1 directory with 11 updates by @dependabot[bot] in https://github.com/airweave-ai/airweave/pull/1527
* fix: handle overlapping billing periods in get_current_period queries by @orhanrauf in https://github.com/airweave-ai/airweave/pull/1536

## New Contributors
* @dependabot[bot] made their first contribution in https://github.com/airweave-ai/airweave/pull/1527

**Full Changelog**: https://github.com/airweave-ai/airweave/compare/v0.9.4...v0.9.5