build(deps): modernize dependency stack (LITE-33140)

Clean, targeted dependency refresh on top of current master, replacing
the stale bot PR #248. Mirrors the sibling bump in
cloudblue/connect-python-openapi-client#86.

Test toolchain:
  pytest      7.2.2  -> 8.4.2
  pytest-cov  2.12.1 -> 6.3.0
  coverage    5.5    -> 7.14.3
  responses   0.20.0 -> 0.26.1

pytest 8 changed collection ordering, exposing a latent isolation bug:
tests/plugins/play/test_play_commands.py deletes and reimports
connect.cli.ccli, so test_ccli.py's module-level 'from ... import main'
bound to a stale module object that mocker.patch never touched. Fixed by
importing main inside each test.

Lint toolchain:
  flake8             5.0.4   -> 7.3.0
  flake8-bugbear     22.12.6 -> 25.11.29
  flake8-commas      2.1.0   -> 4.0.0
  flake8-isort       5.0.3   -> 6.1.2
  flake8-broken-line 0.5.0   -> 1.0.0

Only bugbear codes are enforced (select = "B"); bugbear 25 adds B017,
which flagged a broad pytest.raises(Exception) in test_http.py masking
the real ValueError; narrowed it.

Runtime deps:
  connect-openapi-client  >=29 -> >=35   (34.0 -> 35.0)
  interrogatio            2.3.1 -> 2.4.0
  iso3166                 1.0.1 -> 2.1.1
  phonenumbers            8.13.55 -> 9.0.33
  poetry-core             1.9.1 -> 2.4.1
  click                   8.3.1 -> 8.4.2
  requests                2.32.5 -> 2.34.2

openapi-client 35.0 dropped its importlib-metadata<7 pin (#86), which
unblocked interrogatio 2.4 (needs importlib-metadata>=8.5); that also
pulls httpx 0.28.1 / pytest-httpx 0.35.0 and drops sniffio.

Lint/format stack (black) and runtime majors gated upstream
(eaas-core, reports-core, rich via markdown-renderer) are left untouched.
Full suite: 715 passed.

Author: pcaro