fix(deps): bump @run402/functions ^2.4.0 → ^2.6.0 for cache export + db() ALS

The publish workflow's check-doc-snippets step compiles every code block in
llms-sdk.txt against the installed @run402/functions. The lockfile pinned
2.4.0 (no cache export, db() required a Request arg), failing the new r.cache
SDK doc snippets that just shipped.

Also fix the snippet itself: QueryBuilder exposes insert/update/delete,
not upsert. Mechanical typo.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: MajorTal

package-lock.json

@@ -69,7 +69,7 @@
     "zod": "^3.24.0"
   },
   "devDependencies": {
-    "@run402/functions": "^2.4.0",
+    "@run402/functions": "^2.6.0",
     "@types/node": "^22.0.0",
     "@x402/evm": "^2.6.0",
     "@x402/fetch": "^2.6.0",

package.json

@@ -1228,7 +1228,7 @@ declare const slug: string;
 declare const title: string;
 declare const html: string;
 
-await db().from("pages").upsert({ slug, title, html });
+await db().from("pages").insert({ slug, title, html });
 await cache.invalidate(`/${slug}`);   // sub-second freshness
 ```