[dmytrotkk]

Moves the Python pins, the build and CI tooling, and the lvmpy submodule to current versions. No application code changes.

• click 8.5.0 → 8.5.1 (pyproject.toml): fix release, no behaviour change
• filelock 4.2.4 → 4.2.10 (pyproject.toml): bug fixes, including contended acquires that could retry forever at the timeout deadline
• texttable 1.7.2 → 1.7.3 (pyproject.toml): keeps long integer strings exact in i-typed columns, which the CLI tables do not use; table output is unchanged
• ruff 0.17.3 → 0.17.5 (pyproject.toml dev extra): bug fixes, no new findings
• ghcr.io/astral-sh/uv 0.13.6 → 0.13.8 (Dockerfile), setup-uv version 0.13.6 → 0.13.8 (test.yml, audit.yml) and the README uv minimum: the binary now bundles CPython 3.14.10 from python-build-standalone 20261110, which clears the expat 2.9.0 CVEs (CVE-2026-113351, -115506, -117610, -118370) and moves zlib 1.3.2 → 1.4
• lvmpy submodule 049dd460 (2.1.0-develop.0) → f0e0db7f (2.1.0-develop.1, docker-lvmpy develop): adds lsof holder diagnostics when umount fails

Unchanged: skale.py-core 8.0dev0 and the helper-scripts submodule, which move together with the other consumers after skale.py 8.0dev2.

Tested locally
On CPython 3.14.10 with uv 0.13.8: ruff check passes. The tests pass in a CI-like container with a Docker-in-Docker sidecar (291 passed), and the nftables tests pass (45 passed). The builder image, rebuilt without cache, has expat 2.10.0, zlib 1.4 and OpenSSL 3.5.9. The normal and fair binaries run no-args, version, info and every group's --help with exit 0 in a clean ubuntu:24.04. pip-audit 2.10.1 (OSV) on the --no-dev export finds no known vulnerabilities.

Part of skalenetwork/skale-node#891