Update Python dependencies and GitHub Actions

[terjekv]

Refresh the uv lockfile and minimum development/build requirements: basedpyright 1.40.1, pyright 1.1.414, hatchling 1.32.3, and current transitive releases. HTTPX 0.28.1 remains the latest stable release and its supported range is unchanged. Update setup-uv to 10.1.0 and CodSpeed to 5.2.1 using verified full commit SHAs; all other workflow Actions were checked and are current.

The wire contract and supported Python range are unchanged. The changelog records the dependency refresh. This includes the updates proposed by Dependabot PRs #14 and #15; those PRs can be closed after this combined update lands.

Validation: 127 non-integration tests including benchmarks; pyright and basedpyright with zero errors/warnings; 33 explicitly selected benchmarks; 29 integration tests against the pinned REST 0.1.0 image; wheel/sdist build and contents inspection; Markdown lint; actionlint; clean diff checks. The first integration run passed all assertions but hit a local Podman teardown timeout; the repeated run passed with container lifecycle managed separately. CodSpeed's instrumented comparison runs in CI.

[codspeed]

Merging this PR will not alter performance

✅ 33 untouched benchmarks
⏩ 1 skipped benchmark¹

---

_{Comparing agent/update-dependencies-20260919 (02f1091) with main (daa8617)}

Footnotes

1. 1 benchmark was skipped, so the baseline result was used instead. If it was deleted from the codebase, click here and archive it to remove it from the performance reports. ↩