Update dependencies and clean up Dependabot compatibility

[brainx]

Consolidates the compatible open dependency updates, including the Vitest security fix, and keeps the Python locks, lock compiler, CI, and installation instructions synchronized.

• Update the web runtime and test dependencies, Python runtime/analysis/build tools, and setup-python v7 in CI and the SHA-pinned release workflow.
• Keep pip 26.2.1 and pip-tools 7.6.1. Update the canonical compiler to setuptools 84.0.0 and wheel 0.48.0.
• Group related Python analysis updates. Ignore only docutils 0.23.x while Sphinx 9.1 and sphinx-rtd-theme 3.1 require docutils below 0.23.
• Require Node 22.22.2+, 24.15.0+, or 26+ for the updated frontend development tools. Python runtime support remains 3.10–3.13.

Validation:

• Hash-locked Python installation and pip check passed; Python suite: 697 passed.
• npm run check: 240 UI tests and 4 API-client tests passed; npm run build passed.
• Python development-lock and npm audits reported no known vulnerabilities.
• Changed Python formatting/lint, application type checks, runtime Bandit checks, YAML parsing, and git diff --check passed.

The first parallel web run had one timeout; that test passed in isolation and the complete rerun passed without changing assertions or timeouts. Local native tests used liboqs 0.15.0 with wrapper 0.16.0 and emitted the existing version warning. Python locks were generated with pip-compile on macOS, retaining the unchanged Linux-only dependency blocks; Ubuntu CI passed canonical regeneration, all required checks, and the native liboqs and browser acceptance tests.

Supersedes dependency PRs #20, #37, #39, #42, #43, #44, #45, #46, #47, #49, #50, #51, #52, #53, #57, #60, and #62. The incompatible docutils proposal in #38 is intentionally deferred.