fix(deps): bump vcrpy to 8.2.1 for aiohttp 3.14 compatibility

The pytest CI was failing on every vcr-marked test with:
  AttributeError: module 'aiohttp.streams' has no attribute
  'AsyncStreamReaderMixin'

aiohttp 3.14 (bumped in #3530) removed AsyncStreamReaderMixin, which
vcrpy's aiohttp stub referenced until 8.2.0. The lockfile still pinned
vcrpy 7.0.0 because the aiohttp bump only re-resolved aiohttp, and the
fixed vcrpy 8.2.x releases fall inside the global `exclude-newer = "7 days"`
window. Add a per-package exclude-newer override (mirroring starlette) so
the fixed release is allowed.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: zurdi15

pyproject.toml

@@ -136,7 +136,9 @@ DEP002 = [ # DEP002 rule: Project should not contain unused dependencies
 [tool.uv]
 package = false
 exclude-newer = "7 days"
-exclude-newer-package = { starlette = "2026-05-22" }
+# vcrpy < 8.2.0 references aiohttp.streams.AsyncStreamReaderMixin, removed in
+# aiohttp 3.14; allow the fixed release past the global 7-day window.
+exclude-newer-package = { starlette = "2026-05-22", vcrpy = "2026-06-17" }
 
 [tool.ty.environment]
 root = ["./backend"]