fix(deps): resolve msgpack, wandb, and mistune container CVEs (#3563)

* fix(deps): resolve msgpack, wandb, and mistune container CVEs

Address the 26.08.rc8 nSpect container scan:

- msgpack>=1.2.1 constraint for GHSA-6v7p-g79w-8964 (out-of-bounds read on
  Unpacker reuse); msgpack reaches the venv through ray.
- wandb>=0.28.2 constraint for GO-2026-5970; the 0.28.2 wandb-core binary
  embeds golang.org/x/text v0.41.0, past the fixed 0.39.0.
- mistune>=3.3.0 in the base-image pip block for GHSA-qcq2-496w-v96p
  (quadratic-time parse_link_text DoS).

opentelemetry advances to 1.44.0 because wandb 0.28.2 requires >=1.43.0.

Signed-off-by: Dong Hyuk Chang <9426164+thomasdhc@users.noreply.github.com>
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

* Update uv lock

Signed-off-by: NeMo Bot <nemo-bot@nvidia.com>

---------

Signed-off-by: Dong Hyuk Chang <9426164+thomasdhc@users.noreply.github.com>
Signed-off-by: NeMo Bot <nemo-bot@nvidia.com>
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
Co-authored-by: NeMo Bot <nemo-bot@nvidia.com>