dependencies

Review, apply and verify dependency updates for llm-fw — establish what is actually outdated versus merely proposed, separate the bumps that can move detection from the ones that cannot, drive the real gate, and stop before merging. Use when asked to update dependencies, handle Dependabot pull requests, bump a package, check for outdated packages, or investigate why Dependabot has gone quiet.