Chore: Upgrade library versions

[esnible]

Summary

Upgrade library versions to avoid recent CVEs.

Introduce new make targets to rebuild uv.lock files and to test all Docker builds.

(Optional) Testing Instructions

make test will verify that all of the uv.lock files are in sync.

After merging, we will see a new Dependabot status, which should indicate no critical and (probably) no high severity CVEs.

[rubambiza]

Good security housekeeping — the CVE annotations on each pin are excellent practice. CI is green. A few minor nits:

1. Double "CVE" typo — several comments read "CVE CVE-2026-24486" instead of "CVE-2026-24486". Appears in file_organizer, generic_agent, cloud_storage_tool, slack_tool, weather_tool, and reservation_tool pyproject.toml files.

2. Inconsistent Docker tag in Makefile — test-a2a tags images with $${f} (e.g., a2a/weather_service with a slash), while test-mcp uses $${f##*/} (just the directory name). The a2a variant may produce unexpected tag names.

3. Makefile comment typo — "MCP exampleDocker" is missing a space.

4. reservation_tool CVE pins in dev deps — mcp/reservation_tool/pyproject.toml adds authlib, urllib3, and python-multipart under [dependency-groups] dev rather than [project] dependencies. Since these address runtime CVEs, they should probably be in runtime deps.

None of these block the merge.