fix(deps): pin fastapi 0.135.1 + starlette 0.50.0 — 1.x breekt oude TemplateResponse-signatuur

PR #124 hergenereerde uv.lock waardoor fastapi 0.136.3 → starlette 1.2.1
meekwam. Starlette 1.x verwijdert de deprecated TemplateResponse(name,
context)-signatuur; de context-dict wordt dan als templatenaam doorgegeven
en elke render faalt met 'cannot use tuple as a dict key (unhashable
type: dict)'. OPI heeft 57 call-sites in de oude stijl — productie gaf
500 op elke pagina.

Pin terug naar de laatst werkende versies. Echte fix volgt: alle
TemplateResponse-calls migreren naar request-first signatuur, daarna
unpinnen.

Author: uittenbroekrobbert

operations-manager/python/pyproject.toml

@@ -15,7 +15,7 @@ classifiers = [
     "Typing :: Typed"
 ]
 dependencies = [
-    "fastapi>=0.115.12",
+    "fastapi==0.135.1",
     "alembic>=1.16.1",
     "pydantic==2.12.5",
     "jinja2>=3.1.6",
@@ -30,15 +30,15 @@ dependencies = [
     "fastapi-csrf-protect>=1.0.3",
     "sqlalchemy[asyncio]>=2.0.41",
     "sqlalchemy-utils>=0.41.2",
-    "authlib>=1.6.12",  # CVE-2026-44681 open redirect
+    "authlib>=1.6.12", # CVE-2026-44681 open redirect
     "aiosqlite>=0.21.0",
     "asyncpg>=0.30.0",
     "async-lru>=2.0.5",
     "jinja2-base64-filters>=0.1.4",
-    "python-multipart>=0.0.27",  # CVE-2026-42561 DoS via unbounded headers
-    "mako>=1.3.12",  # CVE-2026-44307 path traversal in TemplateLookup
+    "python-multipart>=0.0.27", # CVE-2026-42561 DoS via unbounded headers
+    "mako>=1.3.12", # CVE-2026-44307 path traversal in TemplateLookup
     "aiohttp>=3.12.13",
-    "gitpython>=3.1.50",  # CVE-2026-42215/42284/44243/44244 + GHSA-mv93-w799-cj2w
+    "gitpython>=3.1.50", # CVE-2026-42215/42284/44243/44244 + GHSA-mv93-w799-cj2w
     "deepdiff>=8.0.1",
     "jsonpath-ng>=1.7.0",
     "tenacity>=9.1.2",
@@ -58,6 +58,7 @@ dependencies = [
     "opentelemetry-instrumentation-sqlalchemy>=0.48b0",
     "opentelemetry-instrumentation-logging>=0.48b0",
     "jsonschema>=4.26.0",
+    "starlette==0.50.0",
 ]
 
 [dependency-groups]