PROJ-025/EPIC-001: Dependency Update Flow — unblock the Dependabot backlog #415

What this is: the tracking issue for keeping Jerry's dependencies current through Dependabot. It belongs to PROJ-025, the tactical-work project for Q4 2026.

Why now: ten open Dependabot pull requests are blocked. Each one fails the same nine of its fifteen CI checks: the eight "Test uv" matrix jobs and the "CI Success" gate. main has not changed since 2026-08-13, when its CI last passed. Meanwhile the daily security scan reports known vulnerabilities in six packages that these pull requests update (see #385).

Goal: fix the shared CI failure once, land the queued updates without weakening any test, and keep main green.

Children: one feature issue, linked below as a sub-issue. Its enabler sub-issue lists the pull requests, the observed facts, and the risks.

Tracking: worktracker epic EPIC-001, in projects/PROJ-025-tactical-work-q4y2026/work/EPIC-001-dependency-update-flow/ on the PROJ-025 working branch until it merges. This issue stays open until the backlog lands on main.