[codeforester]

Summary

• update certifi to 2026.10.23 in the lock and release toolchain
• update opentelemetry-api to 1.45.1 in uv.lock
• update setuptools to 84.1.0 in the build and release toolchain
• constrain the quality/security extra to Python 3.11+ so its file-cache dependency resolves to patched filelock 4.2.4 while retaining the Python 3.10 runtime floor
• document the optional quality-tooling boundary

Validation

• uv lock --check
• uv run --python 3.13 --extra dev --extra typer --extra quality --extra benchmark ./tests/full_validate.sh --gate all
• Python 3.10 and 3.13 test suites

Closes #481