chore(deps): repair original dependency PR140 #141

Parent: https://github.com/MachineWisdomAI/WisdomHelm/issues/93
Merge when clean: yes

Repair ORIGINAL Dependabot PR140 #140, existing branch/head a52e917. Only uv.lock fsspec2026.2->2026.6 and urllib3 2.7->2.8. No matching source issue/root found October8. Read AGENTS, lock/version policy and actual package use; assess compatibility from primary upstream notes/source. Current required Version policy FAILS (version not updated). Test run37469064893 jj0.28 bootstrap failed GitHub API403 rate limit before product tests; separate run37469057950 passed same head. Do not invent product defect or weaken test detection to clear infra failure. Integrate current main normally, run local version updater against actual main with original Conventional Commit PR title, synchronize required metadata/lock mirrors while retaining dependency changes. Run frozen lock install, meaningful affected tests and both jj matrices/full documented tests; push fast-forward under Hermes identity on original branch. Fresh CI should re-probe bootstrap; a real repeated bootstrap defect requires narrow evidence-led repair, not suppression.

No replacement PR, force push, worker merge/publication/install, feature work, FAVA132 local-Laya takeover, or claim this remediates Helmet's immutable Nous base. Return repaired_pr metadata for original bot PR, exact head/base/test/compatibility evidence and six-question audit. First Officer natively reviews original PR and performs normal protected merge. Existing OpenRouter fallback authority applies, max2workers; preserve existing queues/accounts/credentials.