Fix installer dependency resolution and refresh lockfile

src/requirements.txt

@@ -33,7 +33,7 @@ pyperclip>=1.9,<2            # Clipboard support for secret mode
 qrcode>=8.2,<9               # Generate QR codes for TOTP setup
 fastapi>=0.110,<1            # API server
 uvicorn>=0.29,<1             # API server
-starlette>=0.49.1,<1         # API server
+starlette>=0.40,<0.48        # API server (must remain compatible with FastAPI)
 httpx>=0.28.1,<1             # API server
 requests>=2.32,<3            # API server
 python-multipart>=0.0.22,<0.1  # API server file uploads

src/runtime_requirements.txt

@@ -22,7 +22,7 @@ qrcode>=8.2,<9
 typer>=0.12.3,<1
 fastapi>=0.110,<1
 uvicorn>=0.29,<1
-starlette>=0.47.2,<1
+starlette>=0.40,<0.48
 httpx>=0.28.1,<1
 requests>=2.32,<3
 python-multipart>=0.0.20,<0.1