⚠️ SECURITY-#300: Bump vulnerable transitive deps flagged by Dependabot

[FernandoCelmer]

Closes #300

Bumps to patched versions:

• GitPython 3.1.49 → 3.1.57 (fixes alerts Update Documentation #44,Feature/44 #45,Server #48,🪲 BUG: Problem with context of type 'pydantic class' #50-📌 ISSUE-#53: Separate tasks into groups #54)
• PyJWT 2.12.1 → 2.13.0 (fixes alerts Step adaptation with class structure #30,📌 ISSUE-#30: Step adaptation with class structure  #31,Communication layer implementation #33,Multiple tasks #55,Action with timeout, retry_delay and backoff #56)
• pyasn1 0.6.3 → 0.6.4 (fixes alerts 📌 ISSUE-#43: ABC Config / Storage #46,📌 ISSUE-#42: Storage MongoDB #47,📌 ISSUE-#56: Action with timeout, retry_delay and backoff #57)
• idna 3.11 → 3.18 (fixes alert Cython implementation #26)

Not fixable in this PR (upstream constraint):

• cryptography — fix needs >=48.0.1, but alibabacloud-tea-openapi pins cryptography <47.0.0 (alert ABC Config / Storage #43)
• aiohttp / pymdown-extensions — fixed releases (3.14.1+ / 11.0.0+) dropped Python 3.9 support; project supports >=3.9 so the py3.9 resolution keeps the vulnerable version (alerts Release/0.4.1 #27,CLI - Command-Line Interface #28,📌 ISSUE-#33: Communication layer implementation #34-Storage MongoDB #42,Problem with context of type 'pydantic class' #49)

These three need either dropping Python 3.9 support or waiting on the Alibaba SDK to relax its cryptography pin — tracked as follow-up in #300.

Test plan

• pytest tests/ — 553 passed, 4 skipped
• ruff check clean