chore(deps): pin osxphotos>=0.75.6 + dependency audit

[hanselstner]

Summary

Pins osxphotos to >=0.75.6 in pyproject.toml so the resolver locks out accidental downgrades below the version that includes the LetsMove-Kill-on-Hang protection (osxphotos v0.69+), while still allowing future patch/minor updates.

Rationale: STABILITY_PLAN_2026-05-15.md.

Dependency Audit

Before vs. after uv lock (diff /tmp/uv.lock.before uv.lock):

no transitive bumps — the resolver was already at osxphotos 0.75.6, so adding the lower bound did not change any resolved versions. The only uv.lock change is the dependency specifier record itself:

-    { name = "osxphotos" },
+    { name = "osxphotos", specifier = ">=0.75.6" },

Package	Old	New	Bump-Type
(none)	—	—	—

No major bumps; no back-pinning required.

Verification

uv lock                                # Resolved 110 packages in 960ms
diff /tmp/uv.lock.before uv.lock       # identical (only specifier metadata)
uv sync --frozen                       # ok
uv run python -c 'import osxphotos; print(osxphotos.__version__)'
# osxphotos 0.75.6
uv run pytest -q                       # 263 passed in 6.11s

Baseline parity (263 passed) preserved.

Task: W2-2 (9728d3e9-c401-4914-9f90-41a1cdde9373).

---

Pull Request opened by Augment Code with guidance from the PR author