chore(deps): Bump the python-minor group in /backend with 10 updates

Bumps the python-minor group in /backend with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [fastapi](https://github.com/fastapi/fastapi) | `0.128.0` | `0.128.5` |
| [starlette](https://github.com/Kludex/starlette) | `0.50.0` | `0.52.1` |
| [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.45` | `2.0.46` |
| [alembic](https://github.com/sqlalchemy/alembic) | `1.17.2` | `1.18.3` |
| [pymongo](https://github.com/mongodb/mongo-python-driver) | `4.15.5` | `4.16.0` |
| [pyjwt](https://github.com/jpadilla/pyjwt) | `2.10.1` | `2.11.0` |
| [cryptography](https://github.com/pyca/cryptography) | `46.0.3` | `46.0.4` |
| [prometheus-client](https://github.com/prometheus/client_python) | `0.23.1` | `0.24.1` |
| [psutil](https://github.com/giampaolo/psutil) | `7.2.1` | `7.2.2` |
| [aiosmtplib](https://github.com/cole/aiosmtplib) | `5.0.0` | `5.1.0` |


Updates `fastapi` from 0.128.0 to 0.128.5
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.128.0...0.128.5)

Updates `starlette` from 0.50.0 to 0.52.1
- [Release notes](https://github.com/Kludex/starlette/releases)
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md)
- [Commits](Kludex/starlette@0.50.0...0.52.1)

Updates `sqlalchemy` from 2.0.45 to 2.0.46
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)

Updates `alembic` from 1.17.2 to 1.18.3
- [Release notes](https://github.com/sqlalchemy/alembic/releases)
- [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/alembic/commits)

Updates `pymongo` from 4.15.5 to 4.16.0
- [Release notes](https://github.com/mongodb/mongo-python-driver/releases)
- [Changelog](https://github.com/mongodb/mongo-python-driver/blob/master/doc/changelog.rst)
- [Commits](mongodb/mongo-python-driver@4.15.5...4.16.0)

Updates `pyjwt` from 2.10.1 to 2.11.0
- [Release notes](https://github.com/jpadilla/pyjwt/releases)
- [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst)
- [Commits](jpadilla/pyjwt@2.10.1...2.11.0)

Updates `cryptography` from 46.0.3 to 46.0.4
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@46.0.3...46.0.4)

Updates `prometheus-client` from 0.23.1 to 0.24.1
- [Release notes](https://github.com/prometheus/client_python/releases)
- [Commits](prometheus/client_python@v0.23.1...v0.24.1)

Updates `psutil` from 7.2.1 to 7.2.2
- [Changelog](https://github.com/giampaolo/psutil/blob/master/HISTORY.rst)
- [Commits](giampaolo/psutil@release-7.2.1...release-7.2.2)

Updates `aiosmtplib` from 5.0.0 to 5.1.0
- [Release notes](https://github.com/cole/aiosmtplib/releases)
- [Changelog](https://github.com/cole/aiosmtplib/blob/main/CHANGELOG.rst)
- [Commits](cole/aiosmtplib@v5.0.0...v5.1.0)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.128.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor
- dependency-name: starlette
  dependency-version: 0.52.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor
- dependency-name: sqlalchemy
  dependency-version: 2.0.46
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor
- dependency-name: alembic
  dependency-version: 1.18.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor
- dependency-name: pymongo
  dependency-version: 4.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor
- dependency-name: pyjwt
  dependency-version: 2.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor
- dependency-name: cryptography
  dependency-version: 46.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor
- dependency-name: prometheus-client
  dependency-version: 0.24.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor
- dependency-name: psutil
  dependency-version: 7.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor
- dependency-name: aiosmtplib
  dependency-version: 5.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

backend/requirements.txt

@@ -4,20 +4,20 @@
 # FIPS 140-2: Requires RHEL 9 / UBI9 with FIPS-validated OpenSSL
 
 # Core web framework
-fastapi==0.128.0  # Latest stable (Nov 2025), supports starlette 0.49.1+
+fastapi==0.128.5  # Latest stable (Nov 2025), supports starlette 0.49.1+
 uvicorn[standard]==0.40.0
-starlette==0.50.0  # Security: CVE-2025-62727 fixed (O(n²) DoS via HTTP Range header)
+starlette==0.52.1  # Security: CVE-2025-62727 fixed (O(n²) DoS via HTTP Range header)
 python-multipart==0.0.22
 
 # Database
-SQLAlchemy==2.0.45
-alembic==1.17.2
+SQLAlchemy==2.0.46
+alembic==1.18.3
 psycopg2-binary==2.9.11
 asyncpg==0.31.0
 
 # MongoDB / Beanie ODM
 motor==3.7.1
-pymongo==4.15.5
+pymongo==4.16.0
 beanie==1.26.0
 
 # Redis & Celery
@@ -27,14 +27,14 @@ kombu==5.6.2
 amqp==5.3.1
 
 # Authentication & Security
-PyJWT==2.10.1  # Security: CVE-2024-33663 fixed
+PyJWT==2.11.0  # Security: CVE-2024-33663 fixed
 passlib==1.7.4
 bcrypt==5.0.0
 argon2-cffi==25.1.0  # Updated for Python 3.12+ (from 23.1.0, Dependabot PR recommendation)
 python-multipart==0.0.22
 pyotp==2.9.0
 qrcode==7.4.2
-cryptography==46.0.3  # Security: CVE-2024-26130, CVE-2024-0727 fixed (latest stable)
+cryptography==46.0.4  # Security: CVE-2024-26130, CVE-2024-0727 fixed (latest stable)
 
 # SSH / Remote execution
 paramiko==3.5.0
@@ -61,8 +61,8 @@ opentelemetry-instrumentation-fastapi==0.60b1
 opentelemetry-instrumentation-sqlalchemy==0.60b1
 opentelemetry-instrumentation-redis==0.60b1
 opentelemetry-exporter-otlp==1.39.1
-prometheus-client==0.23.1
-psutil==7.2.1  # System and process utilities for health monitoring
+prometheus-client==0.24.1
+psutil==7.2.2  # System and process utilities for health monitoring
 
 # File handling
 aiofiles==24.1.0
@@ -73,7 +73,7 @@ Pillow==12.1.0  # Updated for Python 3.12+ (from 11.3.0, Dependabot PR #170)
 lxml==5.3.0
 
 # Email
-aiosmtplib==5.0.0  # Updated for Python 3.12+ (from 3.0.1, Dependabot PR #168)
+aiosmtplib==5.1.0  # Updated for Python 3.12+ (from 3.0.1, Dependabot PR #168)
                    # Breaking change: Requires Python 3.10+, compatible with Python 3.12
                    # Major version upgrade includes async improvements and bug fixes