Refresh lock file for Python 3.13/3.14 wheel availability

Bump lxml, numpy, scipy, astropy, and related packages to versions
that ship cp313/cp314 wheels (previous pins predated 3.13/3.14
releases). Cap pandas at <3 to avoid pulling in the new pandas 3.0
major version as a side effect of the resolver picking up 3.14
wheel support.

Author: claude