Refresh remaining dependencies and group routine updates

[brainx]

Refresh the remaining compatible runtime and development dependencies after the Dependabot queue was regenerated. This includes cryptography 50.0.1, Starlette 1.6.0, Uvicorn 0.53.0, AnyIO 4.15.1, jsdom 30.1.0, and the build, audit, documentation, and test tools, including filelock 4.0.1 and Twine 7.0.0.

• Regenerate the Python runtime/development locks and update the npm lock within the existing manifest ranges.
• Synchronize build 1.6.1 and click 8.5.0 across the canonical lock compiler, CI, tests, and installation instructions.
• Group related Python runtime updates and remaining routine minor/patch updates. Keep future major updates separate and retain the documented docutils compatibility exclusion.

Validation:

• Hash-locked installation and pip check passed.
• Python suite: 697 passed. Web/API suite: 240 UI tests and 4 API-client tests passed. Production web build passed.
• Python development-lock and npm audits reported no known vulnerabilities.
• Black, flake8, application mypy and runtime Bandit checks passed.
• Built the wheel and source distribution; twine check passed for both.

Local native tests used liboqs 0.15.0 with wrapper 0.16.0 and emitted the existing version warning. Python locks were generated using pip-compile on macOS while preserving the unchanged Linux-only entries. All 12 required GitHub checks passed, including canonical Ubuntu lock regeneration and matching native liboqs/browser integration.

Supersedes #66, #67, #68, #69, #70, #71, #72, #73, #74, #75, #76, and #77.