Deps: lock refresh, and the context manager's Generator annotation (#157)

## Summary

Dependency sweep: lock refresh, plus the one diagnostic the new type
checker raises.

- Lock: django 5.2.18 and 6.1.2 (patch releases), the OpenTelemetry
1.45.1 / 0.66b1 patch set, pytempo 0.6.1, typer 0.27.3, types-requests
and ty. The three OpenTelemetry beta versions in the lock are the
packages that publish no stable release, as before. The lockfile scans
clean with osv-scanner.
- `ty` 0.0.85 flags the `Iterator[None]` return annotation on the
`@contextlib.contextmanager` in `identity/ucp_jwks.py` as the deprecated
overload; it is now `Generator[None]`. Annotation only, no behavior
change.

No release follows: the published package's dependency ranges are
unchanged, and the annotation change alone does not warrant one; it
ships with the next release.

## Type of change

- [ ] Bug fix (no breaking change)
- [ ] New feature (no breaking change)
- [ ] Breaking change (existing callers must update)
- [x] Docs, tests, or internal maintenance only

## Public API

None.

## Test plan

`uv sync --all-extras --all-groups`, then ruff check, ruff format
--check, ty (all checks passed), vulture (as CI runs it) and pytest
(1893 passed) all pass locally.

## Worked with

Varun

## Out of scope / what I did not do

- No release for the annotation change (behavior unchanged); it ships
with the next release.

## Checklist

- [x] Tests cover the new behavior, and the suite passes locally
- [x] Lint, format, and type checks pass
- [x] Docs and README examples updated if the public surface changed
- [x] No secrets, credentials, or personal data in the diff or the tests

Author: vvillait88

agentscore_commerce/identity/ucp_jwks.py

@@ -34,7 +34,7 @@
 from typing import TYPE_CHECKING, Any, Literal, cast
 
 if TYPE_CHECKING:
-    from collections.abc import Iterator
+    from collections.abc import Generator
 
 _JOSE_INSTALL_HINT = (
     "Install the optional dependency: `pip install agentscore-commerce[ucp]` (or `uv pip install joserfc`)."
@@ -50,7 +50,7 @@
 
 
 @contextlib.contextmanager
-def _suppress_joserfc_eddsa_warning() -> Iterator[None]:
+def _suppress_joserfc_eddsa_warning() -> Generator[None]:
     """Suppress joserfc's RFC-9864-deprecation SecurityWarning around JWS sign/verify.
 
     joserfc emits this on every JWS operation that uses EdDSA, despite EdDSA