Consolidate dependency upgrades (#662)

* fix: invalidate template fragments cached with Bootstrap 4 markup

* chore: consolidate pending dependency upgrades

Python: refresh uv.lock; widen pins for simplejson (<5), pytz (<2027), reportlab (<6)
Docker: node 24 -> 26
Actions: docker/login, setup-qemu, setup-buildx -> v4; github-script -> v9; setup-node -> v7

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Sonnet 5.5 <noreply@anthropic.com>

.github/workflows/ci.yml

@@ -55,7 +55,7 @@ jobs:
           python-version-file: ".python-version"
           enable-cache: true
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version: 24
           cache: npm

.github/workflows/combine-prs.yml

@@ -30,7 +30,7 @@ jobs:
 
     # Steps represent a sequence of tasks that will be executed as part of the job
     steps:
-      - uses: actions/github-script@v6
+      - uses: actions/github-script@v9
         id: create-combined-pr
         name: Create Combined PR
         with: