[misc] chore: bump ruff/pyright and widen openai-agents to <0.18

[JoyboyBrian]

Summary

Consolidates Dependabot PRs #242 and #245. Those PRs cannot go green on their own: Dependabot only edits pyproject.toml, while CI installs with uv sync --locked, so every pip bump fails the lockfile check. This PR applies the same version changes together with the regenerated uv.lock.

Closes #242
Closes #245

Changes

• ruff 0.15.15 → 0.15.20, synced in .pre-commit-config.yaml per the "Keep in sync with pre-commit and CI" convention (Dependabot does not know about it)
• pyright 1.1.410 → 1.1.411
• openai-agents[litellm] >=0.14,<0.15 → >=0.14,<0.18
• uv.lock regenerated with uv lock --upgrade-package openai-agents, so the lock actually moves to openai-agents 0.17.7 (transitively openai 2.30.0 → 2.44.0) and tests exercise the new upper bound rather than staying on 0.14

Verification

• pytest: 1720 passed against openai-agents 0.17.7
• ruff check / ruff format --check: clean on 0.15.20
• pyright osmosis_ai/: 0 errors on 1.1.411
• pyright --verifytypes: no unexpected public API errors

Not included (tracked separately): #243 (typer — conflicts with the deliberate <0.26 cap; needs discussion) and #244 (harbor — needs API-compat verification).

---

Summary by cubic

Update ruff/pyright and widen openai-agents to <0.18, regenerating uv.lock so CI uses the updated constraints. This consolidates pending bot bumps and keeps pre-commit versions aligned.

• Dependencies
  • ruff 0.15.15 → 0.15.20 (synced in .pre-commit-config.yaml)
  • pyright[nodejs] 1.1.410 → 1.1.411
  • openai-agents[litellm] >=0.14,<0.15 → >=0.14,<0.18; uv.lock updated to openai-agents 0.17.7 (transitive openai 2.30.0 → 2.44.0)

^{Written for commit 1fa1cf5. Summary will update on new commits.}

[cubic-dev-ai]

No issues found across 3 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Re-trigger cubic}