fix(security): update sandbox apps Pillow dependency

[0xjohnnydev]

What users see

The sandbox-apps Python lock graph resolves Pillow 12.2.0, which GitHub Dependabot reports as vulnerable.

What changed

• Updated the sandbox-apps lock graph to Pillow 12.3.0.
• Refreshed the same lockfile's stale editable-package metadata so the lock remains valid with the current local sandbox dependency graph.
• This focused draft covers alerts Add human demonstration recorder to docs #888 through fix(computer-server): standardize Android handler response format #893 and Issue: VM / VNC "captures" output sound, makes it appreciably louder. #930 through [computer-server] Fix coordinate scaling initialization in MCP screenshot tool #936 for sandbox apps.

Validation

• uv lock --check passed in libs/python/cua-sandbox-apps.
• Confirmed the lockfile resolves Pillow 12.3.0.
• git diff --check passed.

Definition of Done

• Every visible sandbox-apps Pillow alert is mapped to this focused draft.
• The sandbox-apps lock graph resolves outside the reported vulnerable range.
• A maintainer reviews the small lockfile metadata refresh and advances this draft; this automation will not merge or mark it ready.

---

This draft duplicates the same-surface sandbox-apps draft #2725. Review #2725 instead; this PR is retained as a draft for traceability and will not be advanced by the automation.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[0xjohnnydev]

Closing this draft because #2725 already owns the same sandbox apps Pillow dependency change. Keeping both would duplicate review and create lockfile conflicts. No code was merged; please continue review on #2725.