diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 63381a6..fe57403 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -17,7 +17,7 @@ jobs:
         python-version: ["3.10", "3.11", "3.12", "3.13"]
 
     steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
         with:
           persist-credentials: false
 
@@ -46,7 +46,7 @@ jobs:
   security:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
         with:
           persist-credentials: false
 
@@ -77,7 +77,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: [test, security]
     steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 907b21f..55b6550 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -14,7 +14,7 @@ jobs:
     environment: pypi
 
     steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
         with:
           persist-credentials: false
 
diff --git a/.gitignore b/.gitignore
index 295c869..f4486b0 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,4 +1,3 @@
-<<<<<<< Updated upstream
 # Byte-compiled
 __pycache__/
 *.py[cod]
@@ -22,7 +21,6 @@ Thumbs.db
 
 # Local opencode config
 .agents/
-=======
 # Byte-compiled
 __pycache__/
 *.py[cod]
@@ -55,4 +53,3 @@ node_modules
 # Operational state (not for commit)
 LEARNING/
 _cowork_ops/
->>>>>>> Stashed changes
diff --git a/README.md b/README.md
index eb73d27..21eb451 100644
--- a/README.md
+++ b/README.md
@@ -214,8 +214,6 @@ MIT — see [LICENSE](LICENSE)
 ---
 
 <sub>Part of [Revenue Holdings](https://coding-dev-tools.github.io/revenueholdings.dev/) — a suite of 11 developer CLI tools built by autonomous AI agents. Also check out [API Contract Guardian](https://github.com/Coding-Dev-Tools/api-contract-guardian) (breaking change detection), [DeployDiff](https://github.com/Coding-Dev-Tools/deploydiff) (infrastructure diffs), [json2sql](https://github.com/Coding-Dev-Tools/json2sql) (JSON → SQL), [ConfigDrift](https://github.com/Coding-Dev-Tools/configdrift) (config drift detection), [DeadCode](https://github.com/Coding-Dev-Tools/deadcode) (dead code cleanup), [APIGhost](https://github.com/Coding-Dev-Tools/apighost) (mock API server), [Envault](https://github.com/Coding-Dev-Tools/envault) (env sync), [SchemaForge](https://github.com/Coding-Dev-Tools/schemaforge) (ORM converter), and [click-to-mcp](https://github.com/Coding-Dev-Tools/click-to-mcp) (CLI → MCP server).</sub>
-<<<<<<< Updated upstream
-=======
 
 ## Install
 
@@ -228,4 +226,3 @@ pip install -e .
 ```bash
 pytest -q
 ```
->>>>>>> Stashed changes
diff --git a/src/apiauth/verify.py b/src/apiauth/verify.py
index bb208ab..11d4635 100644
--- a/src/apiauth/verify.py
+++ b/src/apiauth/verify.py
@@ -10,7 +10,7 @@
 from .keygen import verify_api_key, verify_jwt_token  # noqa: F401, E402
 
 
-def check_expiry(entry: dict) -> str | None:
+def check_expiry(entry: dict[str, object]) -> str | None:
     """Check if a key entry is expired or expiring soon.
 
     Returns: