chore(release): 0.0.7

Squash-merge lib-standardisation: adopt repo standards across packaging,
tooling, docs, and CI.

- standardize pyproject.toml (canonical packaging, lint config, extras, GSDFC pydoclint)
- add py.typed marker, modernize type hints and Google-style docstrings
- nest generated docs under docs/lib and docs/mcp; add hand-written wiki
- adopt standard Type A PyPI CI pipeline (tag==version guard + quality gate)
- promote generated CHANGELOG.md; bump version to 0.0.7

openapi_first/binder.py

@@ -32,31 +32,33 @@ Notes:
             - Interpret OpenAPI semantics beyond routing metadata.
 """
 
+from types import ModuleType
 from typing import Any
 
+from fastapi import FastAPI
 from fastapi.routing import APIRoute
 
 from .errors import MissingOperationHandler
 
 
 def bind_routes(
-    app,
-    spec: dict,
-    routes_module,
+    app: FastAPI,
+    spec: dict[str, Any],
+    routes_module: ModuleType,
     security_deps: dict[str, list[Any]] | None = None,
 ) -> None:
     """
     Bind OpenAPI operations to FastAPI routes.
 
     Args:
-        app (fastapi.FastAPI):
+        app (FastAPI):
             The FastAPI application instance to which routes will be added.
-        spec (dict):
+        spec (dict[str, Any]):
             Parsed OpenAPI 3.x specification dictionary.
-        routes_module (module):
+        routes_module (ModuleType):
             Python module containing handler functions. Each handler's name MUST
             exactly match an OpenAPI `operationId`.
-        security_deps (dict | None):
+        security_deps (dict[str, list[Any]] | None):
             Optional mapping of ``METHOD:/path`` → ``list[Depends(...)]``
             generated from the spec's ``securitySchemes`` and per-operation
             ``security`` fields.
@@ -85,8 +87,14 @@ def bind_routes(
     paths = spec.get("paths", {})
     security_deps = security_deps or {}
 
+    http_methods = {"get", "put", "post", "delete", "options", "head", "patch", "trace"}
+
     for path, methods in paths.items():
         for http_method, operation in methods.items():
+            if http_method.lower() not in http_methods or not isinstance(
+                operation, dict
+            ):
+                continue
 
             operation_id = operation.get("operationId")
             if not operation_id:
@@ -102,7 +110,7 @@ def bind_routes(
                     path=path,
                     method=http_method,
                     operation_id=operation_id,
-                )
+                ) from None
 
             key = f"{http_method.upper()}:{path}"
             deps = security_deps.get(key, [])