[ValentaTomas]

Moves certifi 2026.7.22 → 2026.10.19 in uv.lock (certifi only, plus the lock revision header), which drops the CAs affected by the eMudhra intermediate CA compromise (https://emudhra.we-have-a-problem.com/). Locally with uv 0.13.5, uv lock --check, pytest -q (124 passed), ruff check/format and the public-tree and CI-policy checks pass. scripts/audit_python_dependencies.sh already fails on main for aiohttp 3.14.3 and multidict 6.7.1 advisories that this PR does not touch, so expect that step to stay red.

[cursor]

PR Summary

Medium Risk
Changes the CA trust store used for TLS verification by HTTP clients; intended security fix but can alter which hosts validate successfully.

Overview
Updates uv.lock so the pinned certifi bundle moves from 2026.7.22 to 2026.10.19 (sdist/wheel hashes only) and the lock revision goes from 3 to 5. No pyproject.toml or application code changes; certifi stays a transitive dependency for httpcore/httpx via e2b. The newer bundle is meant to drop CA material tied to the eMudhra intermediate compromise.

^{Reviewed by Cursor Bugbot for commit 7d289f8. Bugbot is set up for automated code reviews on this repo. Configure here.}