security(deps): bump pytest 7.4.3->8.3.5 (CVE tmpdir), pytest-asyncio/cov compat

pytest (#120-#122, #126): tmpdir vulnerability fixed in 8.1.0+, bumped to 8.3.5.
pytest-asyncio: 0.21.1->0.23.8 for pytest 8.x compatibility.
pytest-cov: 4.1.0->5.0.0.
Removed starlette>=0.40.0 standalone pin from linux/windows requirements —
conflicts with fastapi==0.115.0 which bundles starlette 0.46.x.
Pillow 12.1.1 already patched for FITS GZIP bomb (#123-#125).
cryptography 46.0.6 already patched (#115-#119).
transformers 4.53.1 already patched (#112-#118).

backend/requirements-linux.txt

@@ -4,7 +4,6 @@
 
 # Core Framework
 fastapi==0.115.0
-starlette>=0.40.0
 uvicorn[standard]==0.27.0
 
 # Configuration Management
@@ -17,10 +16,10 @@ python-magic==0.4.27  # Linux-specific (cross-platform)
 python-multipart==0.0.22
 
 # Testing
-pytest==7.4.3
-pytest-asyncio==0.21.1
+pytest==8.3.5
+pytest-asyncio==0.23.8
 httpx==0.26.0
-pytest-cov==4.1.0
+pytest-cov==5.0.0
 psutil==5.9.8
 
 # Image Processing & Forensics

backend/requirements-lock.txt

@@ -16,8 +16,8 @@ pydantic==2.5.3
 pydantic-settings==2.1.0
 pydantic_core==2.14.6
 Pygments==2.19.2
-pytest==9.0.2
-pytest-asyncio==1.3.0
+pytest==8.3.5
+pytest-asyncio==0.23.8
 python-dotenv==1.0.0
 python-magic==0.4.27
 python-multipart==0.0.22

backend/requirements-windows.txt

@@ -3,7 +3,6 @@
 
 # Core Framework
 fastapi==0.115.0
-starlette>=0.40.0
 uvicorn[standard]==0.27.0
 
 # Configuration Management
@@ -16,10 +15,10 @@ python-magic-bin==0.4.14  # Windows-specific
 python-multipart==0.0.22
 
 # Testing
-pytest==7.4.3
-pytest-asyncio==0.21.1
+pytest==8.3.5
+pytest-asyncio==0.23.8
 httpx==0.26.0
-pytest-cov==4.1.0
+pytest-cov==5.0.0
 psutil==5.9.8
 
 # Image Processing & Forensics