build: update wandb to 0.30.0

[balasaajay]

Pin W&B to 0.30.0 to update its bundled wandb-core binary as part of the container security remediation for the reported Go standard-library, golang.org/x/crypto, and gRPC findings.

Regenerate uv.lock with the Docker-pinned uv 0.8.22. The lock update also advances the OpenTelemetry family because W&B 0.30.0 requires its API, SDK, and OTLP HTTP exporter at version 1.43.0 or newer; unrelated ML dependencies remain unchanged.

Validation in a disposable Python 3.12 container:

• uv lock --upgrade-package wandb --no-build-isolation and uv lock --check --no-build-isolation passed.
• Installed W&B using constraints exported from the regenerated lock; offline init, scalar/Table logging, and finish passed with W&B 0.30.0 and locked OpenTelemetry 1.45.1.
• Ruff 0.9.9 lint and format checks passed for the full repository (143 files); git diff --check passed.

The Docker install consumes this lock in /opt/venv. Its inherited PyTorch base image was not available locally, so any separate global W&B installation in that base remains unverified and is not changed by this PR.

Full image builds, GPU/inference tests, and a vulnerability rescan were not run. This PR does not claim to fully remediate the standalone image or clear unrelated findings in the container scan.

[copy-pr-bot]

Auto-sync is disabled for draft pull requests in this repository. Workflows must be run manually.

Contributors can view more details about this message here.