fix: pin starlette<1.0 to prevent startup crash (#648)

Starlette 1.0.0 removed the @app.middleware() decorator, which breaks
nextcloud-mcp-server on fresh installs. Pin starlette<1.0 until we
address the full set of breaking changes.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

pyproject.toml

@@ -30,6 +30,7 @@ dependencies = [
     "prometheus-client>=0.21.0", # Prometheus metrics
     "opentelemetry-api>=1.28.2", # OpenTelemetry API
     "opentelemetry-sdk>=1.28.2", # OpenTelemetry SDK
+    "starlette<1.0", # Pin until we address starlette 1.0 breaking changes (#648)
     "opentelemetry-instrumentation-asgi>=0.49b2", # Auto-instrument ASGI/Starlette
     "opentelemetry-instrumentation-httpx>=0.49b2", # Auto-instrument httpx client
     "opentelemetry-instrumentation-logging>=0.49b2", # Logging integration

uv.lock

@@ -2120,6 +2120,7 @@ dependencies = [
     { name = "python-json-logger" },
     { name = "pythonvcard4" },
     { name = "qdrant-client" },
+    { name = "starlette" },
 ]
 
 [package.dev-dependencies]
@@ -2171,6 +2172,7 @@ requires-dist = [
     { name = "python-json-logger", specifier = ">=3.2.0" },
     { name = "pythonvcard4", specifier = ">=0.2.0" },
     { name = "qdrant-client", specifier = ">=1.17.0" },
+    { name = "starlette", specifier = "<1.0" },
 ]
 
 [package.metadata.requires-dev]