security: upgrade vulnerable dependencies (#88)

## Direct dependencies

### Upgraded

No packages were upgraded.

## Transitive dependencies

### Upgraded

| Package | Version | Needs | Vulnerabilities |
|---|---|---|---|
| starlette | 1.0.0 → 1.0.1 | 1.0.1 | •
[CVE-2026-48710](https://nvd.nist.gov/vuln/detail/CVE-2026-48710)
(medium): Starlette has missing Host header validation that poisons
request.url.path, bypassing path-based security checks |

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

Author: komorebi-security-bot[bot]