fix(deps): bump gitpython to >=3.1.41 for CVE path traversal fix

[mattatcha]

Summary

• Bumps gitpython from pinned ==3.1.38 to >=3.1.41,<4 to resolve high-severity path traversal vulnerability (dependabot alert Fix tiny typo #1)
• Updates lockfile (resolved to 3.1.46)

---

Note

Low Risk
Low-risk dependency update limited to the optional github extra, but it may subtly affect Git operations for integrations relying on GitPython.

Overview
Updates the optional github extra in lib/crewai-tools/pyproject.toml to stop pinning gitpython==3.1.38 and instead require gitpython>=3.1.41,<4 to pick up the path traversal security fix.

Refreshes uv.lock accordingly, resolving GitPython to 3.1.46 and updating the locked sdist/wheel metadata.

^{Written by Cursor Bugbot for commit 0bdc5c0. This will update automatically on new commits. Configure here.}