* chore: skip failing tests for dns.records and workers.beta.workers

- dns.records.scan_review: mock server returns invalid response data
- dns.records.scan_list: mock server returns invalid response data
- workers.beta.workers.create: HTTP 400 error from prism (missing required body properties)
- workers.beta.workers.update: HTTP 400 error from prism (missing required body properties)

Failures observed in both Python and TypeScript SDK test suites.

…rs.observability.telemetry

* chore: skip failing tests for email_security.settings and workers.observability.telemetry

- email_security.settings.allow_policies.edit: HTTP 422 from prism
- email_security.settings.block_senders.edit: HTTP 422 from prism
- email_security.settings.impersonation_registry.edit: HTTP 422 from prism
- email_security.settings.trusted_domains.edit: HTTP 422 from prism
- workers.observability.telemetry.keys: HTTP 400 from prism
- workers.observability.telemetry.query: HTTP 400 from prism
- workers.observability.telemetry.values: HTTP 400 from prism

Failures observed in CI run 25132870851 on cloudflare-typescript PR #2743.

* chore: skip fraud.update test (HTTP 422 from prism)

Failure observed in CI run 25171503153 on cloudflare-typescript PR #2746.

* feat(python): switch package manager from rye to uv

* feat(api): add zero_trust_device_deployment_groups resource

* feat(api): add zero_trust_device_deployment_groups resource

…s to Security Center API

* feat(SCTR): add audit log, classification, and context endpoints to Security Center API

* feat(api): add advanced_tcp_protection endpoint mappings for APIX-639

* feat(api): WC-5056: add Workers .../secrets-bulk endpoints

* fix(r2): remove skip test

* feat(r2): add R2 bucket objects resource mapping (APIX-674)

Map R2 object CRUD operations to SDK resources:
- list: GET /accounts/{account_id}/r2/buckets/{bucket_name}/objects
- get: GET /accounts/{account_id}/r2/buckets/{bucket_name}/objects/{object_key}
- upload: PUT /accounts/{account_id}/r2/buckets/{bucket_name}/objects/{object_key}
- delete: DELETE /accounts/{account_id}/r2/buckets/{bucket_name}/objects/{object_key}

These routes are implemented in r2-gateway-worker but were missing from
the published OpenAPI definition and Stainless config. Closes APIX-674.

* chore: skip failing tests from CI run 26052878605

Skips added for failing prism tests on cloudflare-typescript PR #2753:

- r2.buckets.objects.{list,delete,upload}: HTTP 404 (route not in spec)
- workers.observability.queries.create: HTTP 422 (mock validation)
- zero_trust.access.saml_certificates.{list,get,get_pem,rotate}: HTTP 404
- zero_trust.identity_providers.saml_certificate.create: HTTP 404

CI run: https://github.com/cloudflare/cloudflare-typescript/actions/runs/26052878605

…ore resources

* feat(secrets_store): add Terraform configuration for secrets_store resources

* chore: skip custom_certificates.create from CI run 26106703110

Failing prism test on cloudflare-typescript PR #2753 sync:

- custom_certificates.create: HTTP 422 (mock returns 422 with empty errors body)

CI run: https://github.com/cloudflare/cloudflare-typescript/actions/runs/26106703110