Bump the uv group across 1 directory with 4 updates (#1584)

Bumps the uv group with 4 updates in the / directory: [starlette](https://github.com/Kludex/starlette), [python-multipart](https://github.com/Kludex/python-multipart), [cryptography](https://github.com/pyca/cryptography) and [tornado](https://github.com/tornadoweb/tornado).


Updates `starlette` from 1.0.1 to 1.3.1
- [Release notes](https://github.com/Kludex/starlette/releases)
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md)
- [Commits](https://github.com/Kludex/starlette/compare/1.0.1...1.3.1)

Updates `python-multipart` from 0.0.27 to 0.0.31
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Kludex/python-multipart/compare/0.0.27...0.0.31)

Updates `cryptography` from 46.0.7 to 48.0.1
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/46.0.7...48.0.1)

Updates `tornado` from 6.5.6 to 6.5.7
- [Changelog](https://github.com/tornadoweb/tornado/blob/master/docs/releases.rst)
- [Commits](https://github.com/tornadoweb/tornado/compare/v6.5.6...v6.5.7)

---
updated-dependencies:
- dependency-name: starlette
  dependency-version: 1.3.1
  dependency-type: direct:production
  dependency-group: uv
- dependency-name: python-multipart
  dependency-version: 0.0.31
  dependency-type: direct:production
  dependency-group: uv
- dependency-name: cryptography
  dependency-version: 48.0.1
  dependency-type: direct:production
  dependency-group: uv
- dependency-name: tornado
  dependency-version: 6.5.7
  dependency-type: direct:production
  dependency-group: uv
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

pyproject.toml

@@ -45,10 +45,10 @@ dependencies = [
   # Exact pins because uvx installs from git, ignoring the lock file.
   "urllib3==2.7.0",
   "werkzeug==3.1.7",
-  "starlette==1.0.1",
-  "python-multipart==0.0.27",
+  "starlette==1.3.1",
+  "python-multipart==0.0.31",
   "filelock==3.25.2",
-  "cryptography==46.0.7",
+  "cryptography==48.0.1",
   "regex==2026.2.28",
   "pythonnet==3.1.0 ; sys_platform == 'win32'",
   "oslex==2.0.0",
@@ -92,7 +92,7 @@ dev = [
   "pytest-timeout==2.4.0",
   # Transitive dev deps pinned for security (dependabot alerts).
   # Exact pins because uvx installs from git, ignoring the lock file.
-  "tornado==6.5.6",
+  "tornado==6.5.7",
   "wheel==0.46.3",
   "pyasn1==0.6.3",
   "PyJWT==2.12.0",