chore(deps): refresh uv.lock, clearing disclosed advisories (#665)

uv lock --upgrade within existing pyproject constraints. Advisory-relevant
results: mcp 1.26.0 -> 1.29.0, python-multipart 0.0.22 -> 0.0.32,
authlib 1.6.9 -> 1.7.2, pyjwt 2.12.1 -> 2.13.0, starlette 0.52.1 -> 1.3.1,
cryptography -> 49.0.0 (clears GHSA-537c-gmf6-5ccf per issue update).
Full suite green on the upgraded lock: 2333 passed, 5 skipped, 2 xpassed.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01FmPUotoqsNWWt3b41FMjwv