chore(deps): sweep 2026-09-08 (#85)

## Summary

Routine dependency sweep, lock-only. `uv lock --upgrade` moved two
packages: `anyio` 4.15.0 to 4.15.1 (httpx transitive) and `ty` 0.0.78 to
0.0.79 (dev group). No declared range changed, nothing prerelease in the
lock (prereleases are disallowed in `[tool.uv]`), and no release is
needed.

Audited and current: `httpx` (the only runtime dependency) has no newer
release inside its range; GitHub Actions pins (checkout v7, cache v6,
setup-uv v10.0.1, setup-python v7, gh-action-pypi-publish v1.14.2) are
all at upstream latest. OSV scan over the lock: 24 packages, no issues.

Worked with Varun (varunwadhwa).

## Type of change

- [ ] Bug fix (no breaking change)
- [ ] New feature (no breaking change)
- [ ] Breaking change (existing callers must update)
- [x] Docs, tests, or internal maintenance only

## Public API

none

## Test plan

Ran locally after `uv sync --all-extras --all-groups`: `ruff check`,
`ruff format --check`, `ty check`, `vulture agentscore`, `pytest` (183
passed, 8 skipped, 100% coverage), all exit 0.

## Checklist

- [x] Tests cover the new behavior, and the suite passes locally
- [x] Lint, format, and type checks pass
- [x] Docs and README examples updated if the public surface changed
- [x] No secrets, credentials, or personal data in the diff or the tests

Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>

Author: vvillait88