fix: resolve remaining Python Dependabot alerts

[kalil0321]

Summary

• update the six vulnerable Python packages through uv and regenerate uv.lock
  • cryptography 48.0.0 → 49.0.0
  • mcp 1.26.0 → 1.28.1
  • PyJWT 2.12.1 → 2.13.0
  • python-multipart 0.0.27 → 0.0.32
  • SoupSieve 2.8.3 → 2.9.1
  • Starlette 0.52.1 → 1.3.1
• group future security-only Dependabot updates for Python, the website, Cursor Bridge, and GitHub Actions
• add CI coverage for the Python suite, the static website, and Cursor Bridge

Why

The remaining ten alerts are all high severity, but most require server or parsing paths the current trusted-user CLI does not expose: Starlette form/static serving, MCP HTTP/WebSocket/auth sessions, mixed-algorithm JWT verification, or attacker-controlled SoupSieve selectors. The bundled OpenSSL issue in cryptography remains directly relevant because outbound network peers are outside the trusted local environment. Updating all packages is still cheap defense in depth and prevents these paths becoming reachable later.

Dependabot automatic security fixes are currently disabled at repository level. This configuration is ready to group security PRs once that setting is enabled; routine version-update PRs remain disabled to avoid noise.

Verification

• GitHub CI: Python, Website, and Cursor Bridge jobs passed
• CodeQL JavaScript/TypeScript and Python analyses passed
• uv run --offline --frozen pytest -q — 866 passed
• pnpm run lint — passed
• npm ci --offline — 0 vulnerabilities
• node --check run.mjs — passed
• YAML syntax and git diff --check — passed

The local macOS website build could not load Next's downloaded SWC binary because the OS rejected its code signature; the clean Linux Website CI job passed the type check, lint, and production build.

[cursor]

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.