v1.36.2 — starlette 1.6.0

• Dependency pin: starlette 1.3.1 → 1.6.0. Verified against the full suite and
  an MCP transport smoke covering both protocol eras — modern tools/list keeps
  its resultType, the legacy header-less fast-path is unchanged, GET /mcp/ with
  an SSE Accept still answers 405, and subscriptions/listen still returns
  -32601.
• No behavior change, no schema change, no client action needed.
• Counts unchanged: 55 MCP tools · 7 Resources · 3 Prompts; 2,702 tests green