[vinismarques]

Summary

Widen runtime dependency ranges so downstream projects can use current uvicorn and fastapi releases.

 dependencies = [
-  "fastapi>=0.139.2,<0.140",
+  "fastapi>=0.139.2,<1",
-  "psutil>=6.0.0,<7.1",
+  "psutil>=6.0.0,<8",
-  "uvicorn>=0.34.0,<0.34.3",
+  "uvicorn>=0.34.0,<1",
 ]

Also refreshes the lockfile and dev tooling (ruff 0.17, ty 0.0.90), with the small lint fixes they require, and bumps the version to 5.2.3.

Evidence

• Before: uvicorn[standard]>=0.48 alongside maestro-worker-python fails to resolve.
  After: resolves to uvicorn 0.54.0 and fastapi 0.159.1.
• ruff check, ruff format --check, ty check and pytest pass on Python 3.10 and 3.13.
• Manual run of maestro-server on uvicorn 0.54.0: /health responds, logs stay JSON, and SIGTERM still runs the lifespan shutdown (child processes terminated, ready file removed).

Merge Danger

Door: two-way

Blast Radius: consumers

Projects that relock will pick up newer uvicorn and fastapi.