fix(setup): fix uv-ffi pip subprocess isolation during editable install

During `pip install -e .`, setuptools runs setup.py inside an isolated
build venv whose PYTHONPATH/PYTHONHOME override the real environment's
site-packages, causing `python3 -m pip` to fail with 'No module named pip'
even when pip is installed correctly in the target env.

- Resolve real env Python via CONDA_PREFIX/VIRTUAL_ENV env vars instead
  of probing pip/pip3 executables or walking sys.executable
- Strip PYTHONPATH, PYTHONHOME, and __PYVENV_LAUNCHER__ from the
  subprocess env before invoking pip install
- Add build/install debug prints for dispatcher and uv-ffi stages
- Refactor OptionalBuildExt and platform detection out of the
  SKIP_C_EXTENSIONS else-block so cmdclass is always defined
- Clean up pyproject.toml: remove stale TODO comments, add
  uv vendor target/crates dirs to setuptools exclude list,
  add missing newline at EOF

Author: 1minds3t

licenses/cryptography-wasm.txt

@@ -0,0 +1,10 @@
+License for cryptography-wasm
+=====================================
+
+License file not found in package distribution.
+
+Package information:
+https://pypi.org/project/cryptography-wasm/
+
+To view package metadata:
+pip show cryptography-wasm

pyproject.toml

@@ -87,19 +87,13 @@ dependencies = [
     "aiohttp>=3.8.6,<3.9.0; python_version == '3.7'",    # Last Py3.7 version (20 known CVEs)
     "aiohttp>=3.10.11,<3.11.0; python_version == '3.8'", # Last Py3.8 version (9 known CVEs)
     "aiohttp>=3.13.5; python_version >= '3.9'",          # Latest with all patches
-    #aiohttp-lts on to-do list for pythons 3.7 and 3.8
 
     # cryptography - version split by Python
-    # Python 3.7: stuck at 45.0.7 (upstream dropped 3.7 before 46.x)
-    # CVEs unresolved: CVE-2026-26007 (HIGH), CVE-2026-34073 (LOW), CVE-2026-39892 (MODERATE)
-    # TODO: cryptography-lts needed for py37 to backport fixes landing in 46.0.5–46.0.7     
-    "cryptography>=46.0.7 ; python_version >= '3.8' and platform_system != 'Emscripten'", # fully patched
-    "cryptography>=45.0.7,<46.0 ; python_version == '3.7' and platform_system != 'Emscripten'", # UNSAFE: 3 open CVEs, best available
+    "cryptography>=46.0.7 ; python_version >= '3.8' and platform_system != 'Emscripten'",
+    "cryptography>=45.0.7,<46.0 ; python_version == '3.7' and platform_system != 'Emscripten'",
     "cryptography-wasm>=42.0.2 ; platform_system == 'Emscripten'",
 
     # Security scanning
-    # safety moved to optional 'audit' extra due to CVE-2025-14009 in nltk dependency
-    # pip-audit is now the primary default scanner for all versions
     "pip-audit>=2.0.0",
 
     # uv
@@ -110,10 +104,9 @@ dependencies = [
     "urllib3>=2.6.3; python_version >= '3.10'",
 
     # Flask CVE floor for CVE-2026-27205
-    # TODO: flask-lts needed for py37/py38 to backport CVE-2026-27205
-    "flask>=3.0.3; python_version == '3.8'",  # stuck - upstream dropped 3.8 before 3.1.x
-    "flask>=2.2.5; python_version == '3.7'",  # stuck - upstream dropped 3.7 before 3.1.x
-    "flask>=3.0.3; python_version >= '3.9'",  # latest available, CVE-2026-27205 unpatched until 3.1.3 lands
+    "flask>=3.0.3; python_version == '3.8'",
+    "flask>=2.2.5; python_version == '3.7'",
+    "flask>=3.0.3; python_version >= '3.9'",
 
     # Flask-CORS for interactive docs
     "flask-cors>=3.0,<4.0; python_version < '3.8'",
@@ -123,11 +116,10 @@ dependencies = [
 
 [project.optional-dependencies]
 full = [
-    "tqdm>=4.67.1",  # CVE-2024-34062 patched
+    "tqdm>=4.67.1",
     "python-magic>=0.4.18",
     "redis>=4.0.0,<5.0; python_version == '3.7'",
     "redis>=5.0; python_version >= '3.8'",
-    # Includes audit tools
     "safety>=3.7.0; python_version >= '3.10' and python_version < '3.14'",
     "marshmallow>=4.1.2; python_version >= '3.10'",
 ]
@@ -159,6 +151,8 @@ exclude = [
     "dist*",
     "*.egg-info*",
     "dev_tools*",
+    "omnipkg._vendor.uv.target*",
+    "omnipkg._vendor.uv.crates*",
 ]
 
 [tool.setuptools.package-data]
@@ -174,4 +168,4 @@ license-files = ["LICENSE", "COMMERCIAL_LICENSE.md"]
 include-package-data = true
 
 [tool.pytest.ini_options]
-continue_on_collection_errors = true
+continue_on_collection_errors = true