feat: specify dependency version ranges

src/requirements.txt

@@ -1,42 +1,42 @@
-colorama>=0.4.6
-termcolor>=1.1.0
-cryptography>=40.0.2
-bip-utils>=2.5.0
-bech32==1.2.0
-coincurve>=18.0.0
-mnemonic
-aiohttp>=3.12.15
-bcrypt
-pytest>=7.0
-pytest-cov
-pytest-xdist
-portalocker>=2.8
-nostr-sdk>=0.43
-websocket-client==1.7.0
+colorama>=0.4.6,<1
+termcolor>=1.1.0,<4
+cryptography>=40.0.2,<46
+bip-utils>=2.5.0,<3
+bech32>=1.2,<2
+coincurve>=18.0.0,<22
+mnemonic>=0.21,<1
+aiohttp>=3.9,<4
+bcrypt>=4,<5
+pytest>=7,<9
+pytest-cov>=4,<7
+pytest-xdist>=3,<4
+portalocker>=2.8,<4
+nostr-sdk>=0.43,<1
+websocket-client>=1.7,<2
 
-websockets>=15.0.0
-tomli
-hypothesis
-mutmut==2.4.4
-pgpy==0.6.0
-pyotp>=2.8.0
+websockets>=15,<16
+tomli>=2,<3
+hypothesis>=6,<7
+mutmut>=2.4.4,<4
+pgpy>=0.6,<1
+pyotp>=2.8,<3
 
-freezegun
-typer>=0.12.3
+freezegun>=1.5.4,<2
+typer>=0.12.3,<1
 
 # Optional dependencies - install as needed for additional features
-pyperclip            # Clipboard support for secret mode
-qrcode>=8.2          # Generate QR codes for TOTP setup
-fastapi>=0.116.1     # API server
-uvicorn>=0.35.0      # API server
-starlette>=0.47.2    # API server
-httpx>=0.28.1        # API server
-requests>=2.32       # API server
-python-multipart>=0.0.20  # API server file uploads
-PyJWT                # JWT authentication for API server
-orjson               # Fast JSON serialization for API server
-argon2-cffi          # Password hashing for API server
-toga-core>=0.5.2     # Desktop GUI
-pillow               # Image support for GUI
-toga-dummy>=0.5.2    # Headless GUI tests
-slowapi              # Rate limiting for API server
+pyperclip>=1.9,<2            # Clipboard support for secret mode
+qrcode>=8.2,<9               # Generate QR codes for TOTP setup
+fastapi>=0.110,<1            # API server
+uvicorn>=0.29,<1             # API server
+starlette>=0.47.2,<1         # API server
+httpx>=0.28.1,<1             # API server
+requests>=2.32,<3            # API server
+python-multipart>=0.0.20,<0.1  # API server file uploads
+PyJWT>=2.10.1,<3             # JWT authentication for API server
+orjson>=3.11.1,<4            # Fast JSON serialization for API server
+argon2-cffi>=21,<26          # Password hashing for API server
+toga-core>=0.5.2,<1          # Desktop GUI
+pillow>=11.3,<12             # Image support for GUI
+toga-dummy>=0.5.2,<1         # Headless GUI tests
+slowapi>=0.1.9,<1            # Rate limiting for API server

src/runtime_requirements.txt

@@ -1,29 +1,35 @@
 # Runtime dependencies for vendoring/packaging only
 # Generated from requirements.txt with all test-only packages removed
-colorama>=0.4.6
-termcolor>=1.1.0
-cryptography>=40.0.2
-bip-utils>=2.5.0
-bech32==1.2.0
-coincurve>=18.0.0
-mnemonic
-aiohttp>=3.12.15
-bcrypt
-portalocker>=2.8
-nostr-sdk>=0.43
-websocket-client==1.7.0
+colorama>=0.4.6,<1
+termcolor>=1.1.0,<4
+cryptography>=40.0.2,<46
+bip-utils>=2.5.0,<3
+bech32>=1.2,<2
+coincurve>=18.0.0,<22
+mnemonic>=0.21,<1
+aiohttp>=3.9,<4
+bcrypt>=4,<5
+portalocker>=2.8,<4
+nostr-sdk>=0.43,<1
+websocket-client>=1.7,<2
 
-websockets>=15.0.0
-tomli
-pgpy==0.6.0
-pyotp>=2.8.0
-pyperclip
-qrcode>=8.2
-typer>=0.12.3
-fastapi>=0.116.0
-uvicorn>=0.35.0
-httpx>=0.28.1
-requests>=2.32
-python-multipart>=0.0.20
-orjson
-argon2-cffi
+websockets>=15,<16
+tomli>=2,<3
+pgpy>=0.6,<1
+pyotp>=2.8,<3
+pyperclip>=1.9,<2
+qrcode>=8.2,<9
+typer>=0.12.3,<1
+fastapi>=0.110,<1
+uvicorn>=0.29,<1
+starlette>=0.47.2,<1
+httpx>=0.28.1,<1
+requests>=2.32,<3
+python-multipart>=0.0.20,<0.1
+PyJWT>=2.10.1,<3
+orjson>=3.11.1,<4
+argon2-cffi>=21,<26
+toga-core>=0.5.2,<1
+pillow>=11.3,<12
+toga-dummy>=0.5.2,<1
+slowapi>=0.1.9,<1