[WIP] Dependency bumps #207–#211 stacked (CI check before merging to main) - #212

Process completed with exit code 1.

pip-audit found advisories in the win_arm64 resolution of backend/uv.lock (expected while cryptography is pinned to 46.0.3 there; see backend/pyproject.toml)