sec: relax fastapi upper bound + floor-pin tornado (CVE-2025-62727, CVE-2026-31958) #987

Job	Run time
find-tutorials	4s
test-10_async/00_base/100_langgraph	2m 5s
test-10_async/00_base/000_hello_acp	1m 52s
test-10_async/00_base/020_streaming	2m 43s
test-10_async/00_base/040_other_sdks	14m 53s
test-10_async/10_temporal/070_open_ai_agents_sdk_tools	2m 18s
test-10_async/00_base/030_tracing	1m 51s
test-10_async/00_base/010_multiturn	5m 2s
test-00_sync/030_langgraph	2m 26s
test-00_sync/020_streaming	2m 28s
test-10_async/10_temporal/080_open_ai_agents_sdk_human_in_the_loop	2m 19s
test-10_async/00_base/080_batch_events	2m 38s
test-00_sync/000_hello_acp	1m 53s
test-10_async/10_temporal/030_custom_activities	2m 25s
test-10_async/10_temporal/020_state_machine	2m 17s
test-10_async/10_temporal/090_claude_agents_sdk_mvp	2m 26s
test-10_async/10_temporal/010_agent_chat	2m 16s
test-10_async/10_temporal/000_hello_acp	2m 33s
test-00_sync/010_multiturn	2m 13s
test-10_async/10_temporal/060_open_ai_agents_sdk_hello_world	2m 17s
test-10_async/10_temporal/050_agent_chat_guardrails	2m 7s
Test Summary	3s
	1h 1m 9s

Provide feedback