Update dependencies to satisfy uv audit recommendations

[rolandwalker]

Description

Update dependencies to satisfy uv audit recommendations, and add a dependency cooldown of one week.

• update click to v8.4.2
• update cryptography to v49.0.0
• update pygments to v2.20.0
• update llm to v0.31.1
• update setuptools to v83.x
• update pip to v26.1.2
• update pytest to v9.1.1
• add dependency cooldown period
• exclude cli_helpers and openai from cooldown

The click update contains some breaking changes, but seems to work well.

The pygments update changes the list of known MySQL keywords for syntax highlighting, which we already supplement with additional keywords. It does not yet solve the highlighting bug with terms starting with the string "set", expected in the following release.

The llm update was not directly recommended by uv audit, but pulls in a more recent version if idna. In addition, we can remove an explicit dependency on pydantic_core which was needed to force a newer version and thus a binary wheel, for some platforms.

The dependency cooldown is a defense against supply-chain attacks.

Checklist

• I added this contribution to the changelog.md file.
• I added my name to the AUTHORS file (or it's already there).
• To lint and format the code, I ran

  uv run ruff check && uv run ruff format && uv run mypy --install-types .