chore(deps): patch known security vulnerabilities

Python (uv.lock): cryptography 48.0.0->49.0.0, langsmith ->0.10.9, mcp
->1.28.1, starlette 1.2.1->1.3.1, python-multipart ->0.0.32, langchain
->1.3.14, pydantic-settings ->2.14.2. Resolves the 7 Python-side advisories.

JS (mcp_ripgrep): npm audit fix bumps hono ->4.12.31 and fast-uri ->3.1.4,
clearing all high/moderate hono+fast-uri advisories. Two moderate
@hono/node-server alerts remain (only fixable by downgrading
@modelcontextprotocol/sdk to 1.24.3 — declined as not worth the regression).

Verified: pytest 59 passed/2 skipped, compileall clean, mcp_ripgrep tsc build OK.

Author: bx33661