<!--pre-commit.ci start-->
updates:
- [github.com/python-jsonschema/check-jsonschema: 0.36.1 →
0.36.2](python-jsonschema/check-jsonschema@0.36.1...0.36.2)
<!--pre-commit.ci end-->

---------

Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

## Summary

Fixes three test failures on NetBSD (and FreeBSD/OpenBSD) where
`site_runtime_dir` and `user_runtime_dir` tests hardcode `/run` as the
expected default, but BSD systems use `/var/run`.

The production code in `unix.py` already handles this correctly. This
change makes the test expectations match.

Fixes #449

## Changes

- `_func_to_path`: `site_runtime_dir` default is now `/var/run` on BSD,
`/run` otherwise
- `_SITE_REDIRECT_CASES`: `user_runtime_dir` expected path uses
`/var/run` on BSD, `/run` otherwise

## Test plan

- [x] All 32 related tests pass on Linux (platform check correctly
resolves to `/run`)
- [x] On BSD, the check would resolve to `/var/run`, matching production
behavior

---------

Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

…user_runtime_dir (#452)

Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

<!--pre-commit.ci start-->
updates:
- [github.com/tox-dev/tox-toml-fmt: v1.6.0 →
v1.7.2](tox-dev/tox-toml-fmt@v1.6.0...v1.7.2)
- [github.com/tox-dev/pyproject-fmt: v2.16.0 →
v2.16.2](tox-dev/pyproject-fmt@v2.16.0...v2.16.2)
- [github.com/astral-sh/ruff-pre-commit: v0.15.1 →
v0.15.2](astral-sh/ruff-pre-commit@v0.15.1...v0.15.2)
<!--pre-commit.ci end-->

---------

Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

## Summary
- Add explicit `permissions: contents: read` to workflow files
- Satisfies the `actions/missing-workflow-permissions` code scanning
rule

---------

Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

GitHub recognizes SECURITY.md in .github/ directory. Remove the
duplicate from repo root.

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Remove .yml duplicates and rename to .yaml where needed: rename
dependabot.yml->.yaml rename release.yml->.yaml rename
FUNDING.yml->.yaml

<!--pre-commit.ci start-->
updates:
- [github.com/python-jsonschema/check-jsonschema: 0.36.2 →
0.37.0](python-jsonschema/check-jsonschema@0.36.2...0.37.0)
- [github.com/tox-dev/tox-toml-fmt: v1.7.2 →
v1.8.0](tox-dev/tox-toml-fmt@v1.7.2...v1.8.0)
- [github.com/astral-sh/ruff-pre-commit: v0.15.2 →
v0.15.4](astral-sh/ruff-pre-commit@v0.15.2...v0.15.4)
<!--pre-commit.ci end-->

Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>