Sweep dependencies, move the CI uv pin to 0.12.16, and bump to 2.6.11 (#90)

## Summary

Dependency sweep for python-sdk, plus the release bump to 2.6.11. The
lock upgrade takes idna 3.20, ruff 0.16.8 and ty 0.0.82, and the lock
scans clean for prereleases (`prerelease = "disallow"` stays). The uv
version the three workflows pass to setup-uv as an input moves from
0.12.13 to 0.12.16; that pin is a workflow input dependabot never sees.
Every action pin is at its latest tag and the osv-scanner binary is
already v2.6.0.

Worked with: Varun.

## Type of change

- [ ] Bug fix (no breaking change)
- [ ] New feature (no breaking change)
- [ ] Breaking change (existing callers must update)
- [x] Docs, tests, or internal maintenance only

## Public API

none

## Test plan

Run locally on this branch after `uv lock` (re-locked for the version
bump, since uv.lock embeds it) and `uv sync --all-extras --all-groups`:
`ruff check`, `ruff format --check`, `ty check agentscore/`, `vulture`,
and `pytest tests/ --cov=agentscore` (183 passed, 8 skipped, 99%
coverage). Nothing runtime changed, so no new tests. Release: tag
v2.6.11 after merge and watch the publish run, then move the
`agentscore-py` floor in python-commerce.

## Checklist

- [x] Tests cover the new behavior, and the suite passes locally
- [x] Lint, format, and type checks pass
- [x] Docs and README examples updated if the public surface changed
- [x] No secrets, credentials, or personal data in the diff or the tests

Author: vvillait88

.github/workflows/ci.yml

@@ -22,7 +22,7 @@ jobs:
       - uses: useblacksmith/checkout@v1
       - uses: astral-sh/setup-uv@v10.1.0
         with:
-          version: "0.12.13"
+          version: "0.12.16"
       - run: uv python install 3.12
       - uses: actions/cache@v6
         with:

.github/workflows/publish.yml

@@ -21,7 +21,7 @@ jobs:
 
       - uses: astral-sh/setup-uv@v10.1.0
         with:
-          version: "0.12.13"
+          version: "0.12.16"
 
       - name: Set version from tag
         run: sed -i "s/^version = .*/version = \"${GITHUB_REF_NAME#v}\"/" pyproject.toml

.github/workflows/security.yml

@@ -38,7 +38,7 @@ jobs:
       - uses: useblacksmith/checkout@v1
       - uses: astral-sh/setup-uv@v10.1.0
         with:
-          version: "0.12.13"
+          version: "0.12.16"
       - uses: actions/setup-python@v7
         with:
           python-version: "3.13"

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "agentscore-py"
-version = "2.6.10"
+version = "2.6.11"
 description = "Python client for the AgentScore APIs"
 readme = "README.md"
 license = "MIT"