chore: Update PyJWT and other vulnerabilities (M2-10532) (#2032)

🔗 [Jira Ticket M2-10532](https://mindlogger.atlassian.net/browse/M2-10532)

Audit dependencies:

    make audit

Update direct dependencies:

    uv add "aiohttp>=3.13.4"
    uv add "cryptography>=46.0.6"
    uv add "pyjwt>=2.12.0"

Update indirect dependencies:

    uv sync --upgrade-package pyasn1
    uv sync --upgrade-package pygments
    uv sync --upgrade-package requests

Clean up pinned Python version:

- Update .python-version 3.13.1 (patch version) → 3.13 (minor version)
- Update Dockerfile to use .python-version

Before:

    Vulnerabilities detected!
    Checked: 184 dependencies
    Vulnerable: 15 vulnerabilities (8 low, 5 medium, 2 high)

    ┏━━━━━━━━━━━━━━┳━━━━━━━━━┳━━━━━━━━━━━━━━━━━━━━━┳━━━━━━━━━━┳━━━━━━━━━━━━━━┳━━━━━━━━━━━━━━━━┓
    ┃ Package      ┃ Version ┃ Vulnerability ID    ┃ Severity ┃ Fix Versions ┃ Aliases        ┃
    ┡━━━━━━━━━━━━━━╇━━━━━━━━━╇━━━━━━━━━━━━━━━━━━━━━╇━━━━━━━━━━╇━━━━━━━━━━━━━━╇━━━━━━━━━━━━━━━━┩
    │ aiohttp      │ 3.13.3  │ GHSA-p998-jp59-783m │ MEDIUM   │ 3.13.4       │ CVE-2026-34515 │
    │ aiohttp      │ 3.13.3  │ GHSA-hcc4-c3v8-rx92 │ LOW      │ 3.13.4       │ CVE-2026-34513 │
    │ aiohttp      │ 3.13.3  │ GHSA-m5qp-6w8w-w647 │ MEDIUM   │ 3.13.4       │ CVE-2026-34516 │
    │ aiohttp      │ 3.13.3  │ GHSA-3wq7-rqq7-wx6j │ LOW      │ 3.13.4       │ CVE-2026-34517 │
    │ aiohttp      │ 3.13.3  │ GHSA-mwh4-6h8g-pg8w │ LOW      │ 3.13.4       │ CVE-2026-34519 │
    │ aiohttp      │ 3.13.3  │ GHSA-966j-vmvw-g2g9 │ LOW      │ 3.13.4       │ CVE-2026-34518 │
    │ aiohttp      │ 3.13.3  │ GHSA-63hf-3vf5-4wqf │ LOW      │ 3.13.4       │ CVE-2026-34520 │
    │ aiohttp      │ 3.13.3  │ GHSA-c427-h43c-vf67 │ MEDIUM   │ 3.13.4       │ CVE-2026-34525 │
    │ aiohttp      │ 3.13.3  │ GHSA-w2fm-2cpv-w7v5 │ MEDIUM   │ 3.13.4       │ CVE-2026-22815 │
    │ aiohttp      │ 3.13.3  │ GHSA-2vrm-gr82-f7m5 │ LOW      │ 3.13.4       │ CVE-2026-34514 │
    │ cryptography │ 46.0.5  │ GHSA-m959-cc7f-wv43 │ LOW      │ 46.0.6       │ CVE-2026-34073 │
    │ pyasn1       │ 0.6.2   │ GHSA-jr27-m4p2-rc6r │ HIGH     │ 0.6.3        │ CVE-2026-30922 │
    │ Pygments     │ 2.19.2  │ GHSA-5239-wwwm-4pmq │ LOW      │ 2.20.0       │ CVE-2026-4539  │
    │ PyJWT        │ 2.10.1  │ GHSA-752w-5fwx-jx9f │ HIGH     │ 2.12.0       │ CVE-2026-32597 │
    │ requests     │ 2.32.4  │ GHSA-gc5v-m9x4-r6x2 │ MEDIUM   │ 2.33.0       │ CVE-2026-25645 │
    └──────────────┴─────────┴─────────────────────┴──────────┴──────────────┴────────────────┘

After:

    No vulnerabilities or maintenance issues detected!
    Checked: 184 dependencies
    All dependencies appear safe!

Author: divbzero

.python-version

@@ -1 +1 @@
-3.13.1
+3.13

compose/fastapi/Dockerfile

@@ -11,11 +11,14 @@ ENV UV_PYTHON_INSTALL_DIR=/python
 ENV UV_PYTHON_PREFERENCE=only-managed
 
 # Install Python before the project for caching
-RUN uv python install 3.13
+RUN --mount=type=cache,target=/root/.cache/uv \
+    --mount=type=bind,source=.python-version,target=.python-version \
+    uv python install
 
 WORKDIR /app
 
 RUN --mount=type=cache,target=/root/.cache/uv \
+    --mount=type=bind,source=.python-version,target=.python-version \
     --mount=type=bind,source=uv.lock,target=uv.lock \
     --mount=type=bind,source=pyproject.toml,target=pyproject.toml \
     uv sync --locked --no-install-project --no-dev

pyproject.toml

@@ -9,14 +9,14 @@ dependencies = [
   # Run `uv sync --upgrade-package foo` to upgrade indirect dependencies
   "aio-pika==9.5.*",
   "aiofiles~=24.1.0",
-  "aiohttp>=3.13.3",
+  "aiohttp>=3.13.4",
   "alembic~=1.16.1",
   "asgi-correlation-id~=4.3.4",
   "asyncpg~=0.30.0",
   "azure-storage-blob==12.25.*",
   "bcrypt~=4.3.0",
   "boto3~=1.40.60",
-  "cryptography>=46.0.5",
+  "cryptography>=46.0.6",
   "ddtrace~=3.17.1",
   "fastapi==0.124.*",
   "fastapi-mail>=1.5.3",
@@ -25,7 +25,7 @@ dependencies = [
   "jinja2==3.1.*",
   "nh3==0.3.*",
   "pydantic[email]>=2.0",
-  "pyjwt==2.10.1",
+  "pyjwt>=2.12.0",
   "pymongo==4.13.0",
   "pyotp~=2.9.0",
   "python-multipart>=0.0.22",