Update dependencies to latest stable versions

[shobhit-seg]

Summary

• update all direct and transitive Python dependencies to their latest stable releases
• upgrade pre-commit hooks and GitHub Actions, pinning remote automation to immutable commit SHAs
• pin uv 0.11.29 in the release workflow and retain Python-only Ruff formatting scope
• regenerate uv.lock across supported platforms

Security

• scanned all 35 locked third-party Python packages with OSV-Scanner 2.4.0 using the offline PyPI advisory database: zero known vulnerabilities
• confirmed the actions/download-artifact advisory affecting versions below 4.1.3 is resolved by the v8.0.1 pin
• checked the remaining action and hook repositories for published security advisories

Validation

• uv lock --check
• 119 pytest tests
• Ruff lint and formatting
• pre-commit hooks
• macOS PyInstaller application build
• git diff --check