chore(deps): consolidate Dependabot bumps (#150–#157)

[longieirl]

Summary

Consolidates 7 open Dependabot PRs into a single chore commit rather than merging them individually.

Package	File	Old	New	Dependabot PR
cryptography	requirements/base.txt	>=46.0.5	>=47.0.0	#152
openpyxl	requirements/base.txt	>=3.1.0	>=3.1.5	#154
mypy	requirements/dev.txt	>=1.8.0,<2.0.0	>=1.20.2,<2.0.0	#151
safety	requirements/dev.txt	>=2.0.0,<4.0.0	>=3.7.0,<4.0.0	#156
detect-secrets	requirements/dev.txt	>=1.4.0,<2.0.0	>=1.5.0,<2.0.0	#150
yamllint	requirements/dev.txt	>=1.33.0,<2.0.0	>=1.38.0,<2.0.0	#157
pip-audit	requirements/ci.txt	>=2.7.0	>=2.10.0	#155

All bumps are lower-bound increases within existing upper bounds — no breaking changes expected. The Dependabot PRs will be closed as superseded by this PR.

Test plan

• CI passes (lint, security, tests)
• Close Dependabot PRs chore(deps-dev)(deps-dev): update detect-secrets requirement from <2.0.0,>=1.4.0 to >=1.5.0,<2.0.0 #150, chore(deps-dev)(deps-dev): update mypy requirement from <2.0.0,>=1.8.0 to >=1.20.2,<2.0.0 #151, chore(deps)(deps): update cryptography requirement from >=46.0.5 to >=47.0.0 #152, chore(deps)(deps): update openpyxl requirement from >=3.1.0 to >=3.1.5 #154, chore(deps)(deps): update pip-audit requirement from >=2.7.0 to >=2.10.0 #155, chore(deps-dev)(deps-dev): update safety requirement from <4.0.0,>=2.0.0 to >=3.7.0,<4.0.0 #156, chore(deps-dev)(deps-dev): update yamllint requirement from <2.0.0,>=1.33.0 to >=1.38.0,<2.0.0 #157 as superseded