Refresh pinned evidence toolchain

[omar07ibrahim]

Outcome

Refresh SensorProof's pinned evidence-only toolchain while preserving the released behavior and independently regenerating the complete evidence bundle.

Updates

• actions/setup-python 6.3.0 → 7.0.0 at full SHA 5fda3b95a4ea91299a34e894583c3862153e4b97;
• greenlet 3.2.4 → 3.5.4;
• pyee 13.0.0 → 13.0.1;
• typing-extensions 4.15.0 → 4.16.0;
• future pip and GitHub Actions updates grouped into one weekly provenance-toolchain Dependabot PR.

This supersedes Dependabot PRs #2, #3, #4, and #5 without adding bot-authored commits to project history.

Evidence refresh

The one-shot branch workflow:

• used only full-SHA actions;
• downloaded hash-locked wheels;
• captured in the digest-pinned Chromium 151 container with networking disabled;
• regenerated and verified all 13 evidence files;
• removed itself before creating the second commit;
• committed as Omar Ibrahim.

All 12 payload evidence files remained byte-identical. Only sensorproof-evidence.json changed, updating its source revision/tree binding and source hashes.

Commit contract

• two linear commits;
• both author and committer identities are Omar Ibrahim;
• no merge, squash, co-author, or bot commit;
• no application runtime dependency was added;
• measured scenario results and claim boundaries are unchanged.