github: dependencies resolved clean

python -m pip install --dry-run --disable-pip-version-check --no-input --report report.json . finished with exit 0 in 3 seconds, resolving 1 package.

We cloned the repository at commit 64c5d4197e6b from its pyproject.toml and ran it under sandbox-exec -- (deny default) after importing the base BSD profile, reads allowed only under the system and toolchain paths and the scratch directory, writes confined to that scratch directory, the environment replaced with env -i, and lifecycle scripts disabled. The user's home directory is on no allow list. Python 3.14.6, pip 26.1.2. Nothing was installed and nothing was executed from the project: pip was asked to resolve the dependency set and report it, which is an observation about that day and that toolchain and nothing more.