chore(deps): update security-sensitive tooling

[rezkam]

Summary

• refreshed the uv lockfile to current package versions for build, test, docs, and request/certifi-related transitive dependencies
• bumped direct build/dev/docs dependency minimums where compatible
• kept Python 3.11-compatible docs bounds via environment markers while allowing newer Sphinx/doc tooling on Python 3.12+

Security checks

• Dependabot open alerts: none
• pip-audit against the synced all-extras environment: no known vulnerabilities found

Validation

• make check
• uv run pytest
• make docs
• uv build