fix(security): bump cryptography to 48.0.1 for patched bundled OpenSSL

cryptography wheels through 46.x bundle a vulnerable OpenSSL
(GHSA-537c-gmf6-5ccf, HIGH). 48.0.1 ships patched OpenSSL 4.0.1. Satisfies all
dependent constraints (tightest is <49).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: aarthy-dk

pyproject.toml

@@ -61,7 +61,7 @@ dependencies = [
     "xlsxwriter==3.2.0",
     "psutil==5.9.8",
     "concurrent_log_handler==0.9.25",
-    "cryptography==46.0.7",
+    "cryptography==48.0.1",
     "validators==0.33.0",
     "reportlab==4.2.2",
     "cron-converter==1.2.1",