chore(deps): bump security-critical Python dependencies

[evoludigit]

Summary

• urllib3 >=2.6.0 → >=2.7.0 — fix headers forwarded across origins, decompression-bomb bypass (Dependabot alerts IpAddressString scalar should accept CIDR notation for PostgreSQL INET compatibility #77, chore(deps): Update protobuf requirement from <5.0,>=4.25.8 to >=4.25.8,<7.0 #78)
• langchain-core >=1.2.28 → >=1.3.3 — fix unsafe deserialization via load() allowlists (alert 🚀 Release v0.10.2 - Mutation Input Transformation and Empty String Handling #76)
• banks add >=2.4.2 constraint — fix critical RCE via Jinja2 SSTI (alert Add input_transformer/prepare_input hook support to mutation decorator #75)
• cryptography >=46.0.6 → >=47.0.0
• llama-index / llama-index-core >=0.14.15 → >=0.14.21
• ruff >=0.15.0 → >=0.15.12
• opentelemetry-* >=1.39.0 → >=1.41.1
• aioboto3 >=15.0.0 → >=15.5.0
• protobuf upper bound relaxed from <7.0 to <8.0

Supersedes: #336, #335, #334, #333, #332, #331, #330, #329, #285

Test plan

• 3229 unit tests pass
• ruff checks pass
• CI pipeline passes

🤖 Generated with Claude Code