fix: bump fastmcp, anthropic, aiohttp for Trivy CVEs

Pin indirect dependencies to fix code scanning alerts:
- fastmcp>=3.2.0: CVE-2026-32871 (critical SSRF), CVE-2026-27124 (high)
- anthropic>=0.87.0: CVE-2026-34452, CVE-2026-34450
- aiohttp>=3.13.4: CVE-2026-34525, CVE-2026-34516, CVE-2026-34515,
  CVE-2026-22815, and 6 low-severity CVEs

Assisted-By: Claude (Anthropic AI) <noreply@anthropic.com>
Signed-off-by: Paolo Dettori <dettori@us.ibm.com>

Author: pdettori

a2a/a2a_contact_extractor/pyproject.toml

@@ -14,6 +14,9 @@ dependencies = [
     "pyasn1>=0.6.3",            # Indirect; prevents CVE-2026-30922
     "pydantic-ai>=1.56.0",      # Indirect; prevents CVE-2026-25580
     "filelock>=3.20.1",         # Indirect; prevents CVE-2025-68146
+    "fastmcp>=3.2.0",           # Indirect; prevents CVE-2026-32871 (critical), CVE-2026-27124 (high)
+    "anthropic>=0.87.0",        # Indirect; prevents CVE-2026-34452, CVE-2026-34450
+    "aiohttp>=3.13.4",          # Indirect; prevents CVE-2026-34525, CVE-2026-34516, CVE-2026-34515, CVE-2026-22815
 ]
 
 [tool.uv.sources]