chore: bump pi-agent-core/pi-ai to 0.73.1 and update supported model versions + outdated dependencies

[stealthwhizz]

Summary

Core dependencies and documented model references are stale. Verified against npm registry on 2026-07-29.

1. pi-agent-core + pi-ai (core LLM loop engine)

Pinned ^0.70.2 (resolved 0.70.6), latest is 0.73.1 — 3 minor versions behind. This is the entire agent loop engine; newer model IDs already present in models.generated.js only become reliably accessible after this bump.

• @mariozechner/pi-agent-core: ^0.70.2 → ^0.73.1
• @mariozechner/pi-ai: ^0.70.2 → ^0.73.1

2. Model references in README / docs are behind

Docs/examples still show claude-sonnet-4-5-20250929 and gpt-4o-mini as recommended defaults, while the pi-ai 0.73.1 registry already lists newer options:

Provider	Current in docs	Newer available
Anthropic	claude-sonnet-4-5-20250929	claude-sonnet-4-6
Anthropic	claude-haiku-4-5-20251001	claude-haiku-4-5 (alias)
OpenAI	gpt-4o-mini	gpt-4o, gpt-4.1-mini, gpt-4.1-nano
Google	gemini-2.0-flash	gemini-2.5-flash, gemini-2.5-pro
xAI	not listed	grok-3, grok-3-fast
Mistral	mistral-large-2411	mistral-large-2512, mistral-medium-2505

3. Other outdated dependencies (verified via npm view <pkg> version)

Package	Pinned	Latest	Notes
@modelcontextprotocol/sdk	^1.29.0	1.30.0	safe minor bump
@opentelemetry/api	^1.9.0	1.9.1	safe patch
@opentelemetry/exporter-*-otlp-http, instrumentation, sdk-node	^0.215.0	0.221.0	safe minor bump
@opentelemetry/instrumentation-undici	^0.25.0	0.31.0	6 minor versions, check API
@opentelemetry/resources / sdk-metrics / sdk-trace-node	^2.7.0	2.10.0	safe minor bump
@sinclair/typebox	^0.34.41	0.34.52	safe patch
js-yaml	^4.1.0	5.2.2 (major)	stay on 4.x for now, bump patch only
node-cron	^3.0.3	4.6.0	major — needs API check before bumping
typescript (dev)	^5.7.0	7.0.2	major — skip for now
@types/node (dev)	^22.0.0	26.1.2	too far ahead of Node 20/22 engine range — stay on ^22.x

Proposed work

1. Bump @mariozechner/pi-agent-core and @mariozechner/pi-ai to ^0.73.1.
2. Update model references in README.md / Documentation.md / examples to current recommended models per provider.
3. Bump the safe minor/patch set: @opentelemetry/* family (excluding instrumentation-undici), @modelcontextprotocol/sdk, @sinclair/typebox.
4. Evaluate @opentelemetry/instrumentation-undici 0.31.0 and node-cron 4.x — both are behind by a major/multiple minors and need a test run before bumping.
5. Hold typescript at 5.x and @types/node at ^22.x — those majors need a more deliberate migration.