mdapi-sync-calls-in-async-functions-require-asyncio-to-thread

All conn.mdapi.* calls in simple-salesforce are synchronous blocking operations. Every call inside an async function must be wrapped with asyncio.to_thread() to avoid blocking the event loop. 23 violations were found across metadata, security, integration, and utilities modules — none were wrapped prior to this audit.