chore: Apply non-breaking dependency updates from open dependabot PRs (#9954)

Python:
- requirements.txt: google-auth-oauthlib 1.3.1 -> 1.4.0
  (#9929 / #9931), gated so Python 3.9 stays on 1.3.1 (1.4.0
  requires python_version >= 3.10). Mirrors the existing
  boto3 1.42.*/1.43.* split.
- tools/requirements.txt: requests >=2.33.1 -> >=2.34.2 on
  python_version > '3.9' (#9943 / #9944).
- web/regression/requirements.txt: selenium 4.43.0 -> 4.44.0
  (#9946). The selenium pin already requires Python >=3.10 in
  master, so the bump introduces no new 3.9 gap.

JavaScript (web/package.json, web/yarn.lock):
- postcss 8.5.12 -> 8.5.14 (#9874 / #9889)
- @tanstack/react-query 5.100.5 -> 5.100.9 (#9878)
- ip-address 10.1.0 -> 10.1.1 (#9918)
- packageManager pin yarn@4.14.0 -> yarn@4.15.0 and regenerate
  yarn.lock at lockfile __metadata.version 10. CI runs yarn
  4.15.0 with hardened mode on public PRs and refuses to migrate
  the lockfile from version 9 (yarn 4.14.x) to 10; master passes
  today only because hardened mode is PR-only.

Electron runtime (runtime/package.json, runtime/yarn.lock):
- axios 1.16.0 -> 1.16.1 (#9948)
- eslint 10.3.0 -> 10.4.0 (#9947)

Skipped (genuine breaking changes, deferred to follow-up PRs):
- @mui/material 7 -> 9 (#9843)
- @mui/x-date-pickers 8 -> 9 (#9888)
- cryptography 47.0.* -> 48.0.* (#9926 / #9932)
- paramiko 3.5.1 -> 5.0.0 (#9927 / #9930)
- electron 41.5.0 -> 42.1.0 (#9945)

Verified in an isolated worktree:

  - jest:        140/0/0 suites, 824/0/0 tests
  - eslint:      clean (web + runtime, both silent)
  - pycodestyle: 0 violations project-wide

Each version was cross-checked against the corresponding
dependabot PR diff via `gh pr diff`. Each Python bump was
cross-checked against PyPI's requires_python so Python 3.9
support stays intact.

web/package.json

@@ -86,7 +86,7 @@
     "@projectstorm/react-diagrams": "^7.0.4",
     "@simonwep/pickr": "^1.9.1",
     "@szhsin/react-menu": "^4.5.1",
-    "@tanstack/react-query": "^5.100.5",
+    "@tanstack/react-query": "^5.100.9",
     "@tanstack/react-table": "^8.21.3",
     "@tanstack/react-virtual": "^3.13.24",
     "@types/react": "^19.2.14",
@@ -113,7 +113,7 @@
     "html-to-image": "1.11.11",
     "immutability-helper": "^3.1.1",
     "insert-if": "^1.2.0",
-    "ip-address": "^10.1.0",
+    "ip-address": "^10.1.1",
     "json-bignumber": "^1.1.1",
     "leaflet": "^1.9.4",
     "lodash": "4.*",
@@ -124,7 +124,7 @@
     "notistack": "^3.0.2",
     "papaparse": "^5.5.3",
     "path-fx": "^2.1.2",
-    "postcss": "^8.5.12",
+    "postcss": "^8.5.14",
     "rc-dock": "^4.0.0-alpha.2",
     "react": "^19.2.5",
     "react-arborist": "^3.5.0",
@@ -180,7 +180,7 @@
     "auditpy": "safety check --full-report -i 51668 -i 52495",
     "audit-all": "yarn run auditjs && yarn run auditpy"
   },
-  "packageManager": "yarn@4.14.0",
+  "packageManager": "yarn@4.15.0",
   "browserslist": [
     "defaults and fully supports es6-module"
   ]