fix(deps): patch Python and docsite vulnerability set

[raphael-intugle]

Summary

• refreshes vulnerable Python packages in uv.lock including aiohttp, gitpython, pillow, cryptography, anthropic, pytest, langchain-*, langsmith, python-multipart, and python-dotenv
• updates Streamlit app dependency pinning to python-dotenv==1.2.1 in both pyproject.toml and src/intugle/streamlit_app/requirements.txt, then re-locks with uv
• applies docsite lockfile remediations in docsite/package-lock.json

Verification

• uvx pip-audit reports no known Python vulnerabilities
• npm audit --json in docsite/ reports 0 vulnerabilities
• uv lock --upgrade-package aiohttp resolves with no further available aiohttp upgrade, leaving uv.lock on aiohttp==3.13.5

Notes

• the additional low-severity aiohttp GitHub alerts appear to be addressed by the current locked version and did not reproduce in the independent audit scan