build(deps): add constraint for Starlette

[steinbro]

Pin the indirect dependency to a version not affected by BadHost CVE.

---

• I've followed the contribution guidelines.
• I've signed the CLA.
• I've successfully run make lint && make test.
• I've added or updated any relevant documentation.
• In documents I changed, I added a meta description if one was missing.
• I've updated the relevant release notes.

[Copilot]

Pull request overview

Adds a minimum-version constraint for the indirect dependency Starlette to ensure dependency resolution avoids versions impacted by the referenced BadHost CVE.

Changes:

• Add starlette>=1.0.1 to tool.uv.constraint-dependencies so --resolution=lowest won’t select older Starlette versions.
• Update uv.lock constraints and resolve Starlette to 1.2.1.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.

File	Description
pyproject.toml	Adds starlette>=1.0.1 to uv’s constraint list to enforce a safe minimum version during resolution.
uv.lock	Records the new constraint and updates the locked Starlette package version accordingly.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.