Add IT Dashboard investments endpoints

[vdavez]

Summary

• Adds list_itdashboard_investments and get_itdashboard_investment for the /api/itdashboard/ resource (ITDashboardInvestment model, ShapeConfig.ITDASHBOARD_INVESTMENTS_MINIMAL / _COMPREHENSIVE, schema registration, conformance entry).
• Filters mirror the API's tier-gated filterset with explicit named params and proper bool → "true"/"false" and date/datetime → ISO serialization:
  • Free: search
  • Pro: agency_code, type_of_investment, updated_time_after/updated_time_before
  • Business+: agency_name, cio_rating, cio_rating_max, performance_risk
• 4 unit tests + 14 integration tests with recorded cassettes (every filter, shape variants, pagination, funding(*) dict expansion, cio_evaluation(*) list-of-dict expansion).

Test plan

• pytest tests/test_client.py tests/test_models.py tests/test_shapes.py — 215 unit tests pass
• pytest tests/integration/test_itdashboard_integration.py — 14 cassette-replay tests pass in <1s
• pytest tests/ full suite — 361 passed, 2 skipped (pre-existing)
• Conformance check (scripts/check_filter_shape_conformance.py --manifest …/filter_shape_contract.json) — 0 errors
• Cassettes verified to contain no API key headers (filtered by vcr_config)
• Live recording pass against https://tango.makegov.com/api/itdashboard/ succeeded with a business+ key

Notes

• Cassettes recorded with a business+ key. Re-recording with a lower-tier key would 403 on the gated filter tests; documented in the test module docstring.
• The ../tango filter manifest does not yet enumerate itdashboard under resources, so the conformance script can't validate filter-param parity for itdashboard against the manifest. That's a tango-side regen, not an SDK fix.
• The pre-existing uv.lock modification (a 0.4.3 → 0.4.4 version bump) was intentionally left out of this PR — it predates this work.

🤖 Generated with Claude Code