pip-audit fixes to unblock release #258

Job	Run time
Quality (format, lint, repo-map)	27s
Security (dependency and static checks)	24s
Contract Stability Guardrails	30s
Test (stable CI subset)	1m 46s
	3m 7s

Provide feedback