chore(deps): update cryptography requirement from >=41.0.0 to >=49.0.0 in /apps/api

apps/api/requirements.in

@@ -6,7 +6,7 @@
 # Runtime requirements declared by packages/{commons,llm,memory,retrieval}.
 # Keep these in sync with those package manifests. tools and agent_runtime have
 # no runtime dependencies at this time.
-cryptography>=41.0.0
+cryptography>=49.0.0
 httpx>=0.28.0
 motor>=3.7.0
 openai>=2.0.0

apps/api/requirements.txt

@@ -1,47 +1,101 @@
-fastapi>=0.111.0
-uvicorn[standard]>=0.29.0
-email-validator>=2.1.0
-sse-starlette>=2.1.0
-websockets>=12.0
-pydantic>=2.7.1
-pydantic-settings>=2.2.1
-python-multipart>=0.0.9
-python-jose[cryptography]>=3.3.0
-passlib[bcrypt]>=1.7.4
-bcrypt<5
-redis>=5.0.4
-motor>=3.4.0
-pymongo>=4.7.2
-qdrant-client>=1.9.1
-opentelemetry-api>=1.24.0
-opentelemetry-sdk>=1.24.0
-opentelemetry-instrumentation-fastapi>=0.45b0
-opentelemetry-instrumentation-redis>=0.45b0
-opentelemetry-instrumentation-pymongo>=0.45b0
-prometheus-client>=0.20.0
-structlog>=24.1.0
-tenacity>=8.2.3
-psutil>=5.9.8
-sse-starlette>=2.1.0
-
-# OpenAI Integration
-openai>=1.23.6
-
-# Environment and configuration
-python-dotenv>=1.0.1
-azure-identity>=1.15.0
-azure-keyvault-secrets>=4.8.0
-google-auth>=2.38.0
-
-# Additional utilities
-aiofiles>=23.2.1
-pypdf>=4.2.0
-python-docx>=1.1.2
-
-# Catalog service (product import + scraping)
-httpx>=0.27.0
-firecrawl-py>=1.0.0
-
-# Test tooling
-pytest>=8.3.0
-pytest-asyncio>=0.24.0
+aiofiles==25.1.0
+aiohappyeyeballs==2.7.1
+aiohttp==3.14.1
+aiosignal==1.4.0
+annotated-doc==0.0.4
+annotated-types==0.7.0
+anyio==4.14.2
+asgiref==3.12.1
+attrs==26.1.0
+azure-core==1.41.0
+azure-identity==1.25.3
+azure-keyvault-secrets==4.11.0
+bcrypt==4.3.0
+certifi==2026.6.17
+cffi==2.1.0
+charset-normalizer==3.4.9
+click==8.4.2
+cryptography==49.0.0
+distro==1.9.0
+dnspython==2.8.0
+ecdsa==0.19.2
+email-validator==2.3.0
+fastapi==0.139.2
+firecrawl-py==4.32.1
+frozenlist==1.8.0
+google-auth==2.56.0
+grpcio==1.82.1
+h11==0.16.0
+h2==4.3.0
+hpack==4.2.0
+httpcore==1.0.9
+httptools==0.8.0
+httpx[http2]==0.28.1
+hyperframe==6.1.0
+idna==3.18
+iniconfig==2.3.0
+isodate==0.7.2
+jiter==0.16.0
+lxml==6.1.1
+motor==3.7.1
+msal==1.37.0
+msal-extensions==1.3.1
+multidict==6.7.1
+nest-asyncio==1.6.0
+numpy==2.5.1
+openai==2.46.0
+opentelemetry-api==1.44.0
+opentelemetry-instrumentation==0.65b0
+opentelemetry-instrumentation-asgi==0.65b0
+opentelemetry-instrumentation-fastapi==0.65b0
+opentelemetry-instrumentation-pymongo==0.65b0
+opentelemetry-instrumentation-redis==0.65b0
+opentelemetry-sdk==1.44.0
+opentelemetry-semantic-conventions==0.65b0
+opentelemetry-util-http==0.65b0
+packaging==26.2
+passlib[bcrypt]==1.7.4
+pluggy==1.6.0
+portalocker==3.2.0
+prometheus-client==0.25.0
+propcache==0.5.2
+protobuf==7.35.1
+psutil==7.2.2
+pyasn1==0.6.4
+pyasn1-modules==0.4.2
+pycparser==3.0
+pydantic==2.13.4
+pydantic-core==2.46.4
+pydantic-settings==2.14.2
+pygments==2.20.0
+pyjwt[crypto]==2.13.0
+pymongo==4.17.0
+pypdf==6.14.2
+pytest==9.1.1
+pytest-asyncio==1.4.0
+python-docx==1.2.0
+python-dotenv==1.2.2
+python-jose[cryptography]==3.5.0
+python-multipart==0.0.32
+pyyaml==6.0.3
+qdrant-client==1.18.0
+redis==8.0.1
+requests==2.34.2
+rsa==4.9.1
+six==1.17.0
+sniffio==1.3.1
+sse-starlette==3.4.5
+starlette==1.3.1
+structlog==26.1.0
+tenacity==9.1.4
+tqdm==4.69.0
+typing-extensions==4.16.0
+typing-inspection==0.4.2
+urllib3==2.7.0
+uvicorn[standard]==0.51.0
+uvloop==0.22.1
+watchfiles==1.2.0
+websockets==16.1.1
+wheel==0.47.0
+wrapt==2.2.2
+yarl==1.24.2