deps: close 41 Dependabot security alerts via lockfile bumps

[dsfaccini]

Closes 41 open Dependabot alerts via lockfile-only bumps (Seth Larson rule: library version specs are for compatibility, security fixes belong in the lockfile).

Python transitive deps (uv.lock)

Updated [tool.uv].constraint-dependencies and relocked. Notable changes:

• Removed the temporary aiohttp<3.14 ceiling; vcrpy>=8.2.1 now includes the aiohttp 3.14 compatibility fix (Fix aiohttp 3.14 compatibility (AsyncStreamReaderMixin removed, ClientResponse requires stream_writer) kevin1024/vcrpy#996).
• Added floors for newly alerted transitive deps: joserfc>=1.6.7, pydantic-settings>=2.14.2, vcrpy>=8.2.1, starlette>=1.3.1, aiohttp>=3.14.1, python-multipart>=0.0.31, pyjwt>=2.13.0, torch>=2.10.0.
• Raised existing floors: cryptography>=48.0.1, langsmith>=0.8.18.

Alerts closed: #134, #135, #136, #143–#151, #156–#169, #184–#187.

npm docs-site deps (docs-site/package-lock.json)

Updated overrides in docs-site/package.json and regenerated the lockfile:

• protobufjs: ^7.5.8 → ^7.6.3
• undici: ^7.28.0
• @opentelemetry/core: ^2.8.0
• esbuild: ^0.28.1

Alerts closed: #141, #153, #154, #155, #177–#183.

Deferred

• torch GHSA-rrmf-rvhw-rf47 (Support OpenRouter #139): no patched release is available (patched: null).

Verification

• make format && make lint passed.
• Locked versions verified to be at or above each first patched release.