fix(deps): cap cryptography <49 to keep Intel macOS universal2 wheel

[bearsyankees]

cryptography 49.x ships arm64-only macOS wheels (no universal2), forcing the Intel macOS (macos-x86_64) release runner to build from sdist under uv sync --frozen. Pin to 48.0.1, which still clears GHSA-537c-gmf6-5ccf (fixed in 48.0.1) and provides a macosx_10_9_universal2 wheel.

[greptile-apps]

Greptile Summary

This PR keeps cryptography on a release that supports Intel macOS. The main changes are:

• Caps the dependency at >=48.0.1,<49.
• Locks cryptography to version 48.0.1.
• Adds the universal2 macOS wheel to the locked artifacts.

Confidence Score: 5/5

This looks safe to merge.

• No blocking issues found in the changed code.

Important Files Changed

Filename	Overview
pyproject.toml	Caps cryptography below version 49 while retaining 48.0.1 as the minimum.
uv.lock	Resolves cryptography to 48.0.1 and records wheels covering the supported release platforms, including Intel macOS.

_{Reviews (1): Last reviewed commit: "fix(deps): cap cryptography <49 to keep ..." | Re-trigger Greptile}