fix(ci): pin cryptography>=46,<49 and relax dep ranges to fix x86 build failures

- Update version constraints for openai, anthropic, google-genai, pillow
  to support recent dependabot bumps.
- Pin cryptography>=46.0.0,<49 (49.0 removed 32-bit Windows wheels;
  46+ provides reliable cp314-win32 wheels for Python 3.14).
- Add cryptography to cx_Freeze zip_include_packages.
- Regenerated uv.lock.

Research confirmation:
- cryptography 49.0.0 (2026-06): BACKWARDS INCOMPATIBLE: 32-bit Windows
  support (and wheels) removed.
- 48.0.1 and 46.0.0 still ship cp314*win32 wheels.
- Lower bound 43 was too old (no py3.14 wheels).

Author: AAClause

pyproject.toml

@@ -14,6 +14,7 @@ dependencies = [
     "alembic>=1.18,<1.19",
     "anthropic>=0.116.0,<0.117",
     "babel>=2.17,<2.19",
+    "cryptography>=46.0.0,<49",
     "fsspec>=2026.6.0,<2026.7",
     "google-genai>=2.11.0,<2.12",
     "httpx>=0.28.1,<0.29.0",
@@ -23,7 +24,7 @@ dependencies = [
     "more-itertools>=11.1.0,<11.1.1",
     "numpy>=2.4.6,<2.5",
     "ollama>=0.6.2,<0.7",
-    "openai>=2.38.0,<2.39",
+    "openai>=2.45.0,<2.46",
     "ordered-set>=4.1,<4.2",
     "pillow>=12.3.0,<12.4",
     "platformdirs>=4.10.0,<4.11",
@@ -156,7 +157,7 @@ packages = [
     "sqlalchemy.dialects.sqlite", "upath.implementations"]
 zip_include_packages = [
     "_pyrepl", "alembic", "anyio", "annotated_types", "anthropic", "asyncio",
-    "backports", "cachetools", "certifi", "cffi", "charset_normalizer", "compression", "concurrent", "collections", "colorama", "ctypes", "curses",
+    "backports", "cachetools", "certifi", "cffi", "cryptography", "charset_normalizer", "compression", "concurrent", "collections", "colorama", "ctypes", "curses",
     "distro", "docstring_parser", "dotenv", "email", "encodings", "eval_type_backport", "fsspec",
     "greenlet", "google", "googleapiclient", "grpc_status",
     "h11", "html", "httpcore", "http", "httplib2", "httpx",