chore(deps): bump pydantic-settings and vulnerable website deps (#1020)

## Summary
Lockfile-only bumps to patched versions, within existing ranges:

**Python (`uv.lock`):**
- `pydantic-settings` 2.14.1 → 2.14.2 (medium)

**Docs website (`website/pnpm-lock.yaml`):**
- `undici` 7.27.2 → 7.28.0 (high + medium + low)
- `http-proxy-middleware` 2.0.9 → 2.0.10 (medium)
- `webpack-dev-server` 5.2.4 → 5.2.5 (medium)

No manifest or override changes.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Author: B4nan