Refresh the dev toolchain lock

Routine dependency pass. Only ty moves, 0.0.65 to 0.0.66, a dev-group type
checker that no consumer resolves, so no release is needed and no caller has to
act. Nothing else in the tree had a newer version inside its declared range.

pip-audit and osv-scanner both report the lockfile clean, and the suite holds
100% coverage.

Verification: ruff check, ruff format --check, ty check and pytest (183 passed,
8 skipped, 100% coverage) all green, plus osv-scanner v2.4.0 over uv.lock.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

Author: vvillait88