Patch CVE-2026-30922 (pyasn1) and CVE-2026-32597 (PyJWT) (#18)

Bumps pyasn1 0.6.2 -> 0.6.3 (DoS via unbounded recursion in ASN.1
decoding) and PyJWT 2.10.1 -> 2.12.1 (crit header validation per
RFC 7515 section 4.1.11).

https://claude.ai/code/session_01SV4gG9ivBP5LNEhydEtwtc

Co-authored-by: Claude <noreply@anthropic.com>

Author: naomi-robusta

poetry.lock

@@ -17,7 +17,7 @@ cryptography = {version = "46.0.5", python = ">=3.9.2,<3.13"}
 dpath = "^2.0.5"
 pydantic = "^1.0"
 slack-sdk = "^3"
-pyjwt = "^2.4.0"
+pyjwt = "^2.12.0"
 requests = "^2.32.2"
 certifi = "2024.7.4"
 types-toml = "^0.10.2"