fix(deps): upgrade vulnerable transitive dependencies [security]

[utic-github-cicd-token-generator]

Summary

Automated scan found CVEs in transitive dependencies locked in uv.lock files.
These packages were upgraded to patched versions.

Remediated vulnerabilities

Package	From	To	Severity	CVE
cryptography	46.0.6	46.0.7	Medium	CVE-2026-39892
pypdf	6.9.2	6.10.0	Medium	CVE-2026-40260

Skipped (major version bump required)

Package	From	To	Severity	CVE	Reason
langchain-core	0.3.83	1.2.11	Low	CVE-2026-26013	major bump
langchain-core	0.3.83	1.2.22	High	CVE-2026-34070	major bump

These require a major version upgrade and should be planned manually.

What this PR does

1. Scans all uv.lock files with grype for known CVEs
2. Runs uv lock --upgrade-package <pkg> for each fixable vulnerability (skips major bumps)
3. Bumps component versions (patch) and updates CHANGELOGs via version-bump

Created by lockfile-security-scan.
Targets transitive dependencies that Renovate cannot reach.