Fix Dependabot security alerts

Bump vulnerable npm and Python dev/transitive dependencies:
- npm: postcss, vite, brace-expansion, smol-toml
- python/: pytest (^9.0.3), pytest-asyncio (^1.3.0), pillow, pygments,
  python-dotenv
- chart_data_extractor/: pytest (^9.0.3), pillow, pygments
- template/requirements.txt: pytest 9.0.3

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Author: mishushakov

chart_data_extractor/poetry.lock

@@ -17,7 +17,7 @@ matplotlib = "^3.10.3"
 pydantic = "^2.9.1"
 
 [tool.poetry.group.dev.dependencies]
-pytest = "^8.3.5"
+pytest = "^9.0.3"
 python-dotenv = "^1.2.1"
 pytest-dotenv = "^0.5.2"
 ruff = "^0.11.12"