Security updates and agent-run fixes

Security dependency updates

This release refreshes packages identified in security reviews across the web app, API, Python locks, agent sandbox and runner. The changes include runner dependency updates and web dependency updates. This is a dependency refresh, not a claim that a particular deployment was exploited.

Bug fixes

• The runner bounds Codex adapter initialization and seeds the pinned adapter under a HOME override. This addresses first turns that stayed running on that self-hosted setup.
• Agent runs in the app always include their project, so a member's default project is not used in place of the shared project they opened.
• The model list shows Kimi K3.1 Pro by name. Session names no longer carry a lock icon.