fix(security): bump paramiko to 5.0.0 for CVE-2026-44405 (#127)

Pin paramiko>=5.0.0 in netops-mcp-server to remove SHA-1 support in RSA
key handling. Resolves Dependabot alert #15; netmiko resolves to 4.6.0
until it supports paramiko 5.x.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: pamosima

netops-mcp-server/pyproject.toml

@@ -8,6 +8,7 @@ dependencies = [
     "fastmcp>=3.4.6",
     "pyjwt>=2.12.0",  # GHSA: override transitive PyJWT (crit header); Dependabot alert #1
     "cryptography>=50.0.0",  # CVE-2026-69247 and prior crypto CVEs (transitive via paramiko / PyJWT)
+    "paramiko>=5.0.0",  # CVE-2026-44405 (transitive via netmiko)
     "python-multipart>=0.0.32",  # CVE-2026-40347 (transitive via Starlette/FastMCP)
     "starlette>=1.4.1",  # CVE-2026-54283, CVE-2026-48818 (transitive via FastMCP / sse-starlette)
     "mcp>=1.28.1",  # CVE-2026-59950, CVE-2026-52869/52870 (transitive via FastMCP)