chore: consolidate all dependabot dep bumps (closes #210 #211 #212 #213 #214 #215 #216 #217 #222 #225)

[longieirl]

Summary

Consolidates 10 open Dependabot PRs into a single bump to avoid sequential pyproject.toml conflicts and reduce CI noise.

Closes #210, #211, #212, #213, #214, #215, #216, #217, #222, #225

Python dependencies

File	Package	From	To
base.txt	pdfplumber	>=0.11.9	>=0.11.10
base.txt	pypdf	>=6.11.0	>=6.13.3
dev.txt	black	>=26.3.1,<27	>=26.5.1,<27
dev.txt	ruff	>=0.15.12,<1	>=0.15.18,<1
dev.txt	types-openpyxl	>=3.1.5.20260508	>=3.1.5.20260518
dev.txt	ipython	>=9.13.0,<10	>=9.14.1,<10
dev.txt	safety	>=3.7.0,<4	>=3.8.1,<4
ci.txt	pip-audit	>=2.10.0	>=2.10.1
test.txt	pytest	9.1.0	9.1.1
test.txt	faker	40.23.0	40.28.1
test.txt	responses	0.26.1	0.26.2
test.txt	coverage	7.14.1	7.15.0
test.txt	locust	2.44.3	2.44.4
docs.txt	sphinx-autodoc-typehints	3.11.0	3.12.1

GitHub Actions

Action	From	To
actions/checkout	v7.0.0	v7.0.1
actions/setup-python	v6	v7
actions/labeler	v6	v7
ossf/scorecard-action	v2.4.3	v2.4.4

Test plan

• CI passes (lint, type check, tests, coverage ≥ 91%)
• After merge, close the 10 Dependabot PRs listed above