Update compatible dependencies for release 3.2.7

[dependabot]

Release-Version: 3.2.7

Updates MarkupSafe from 3.0.3 to 3.0.4 in the query, search and MCP runtime locks, and fixes the dashboard dependency audit.

The original branch could not resolve its Python dependencies:

• Published getbible-mcp 2.1.2 requires mcp==2.2.0. The bot's mcp/mcp-types 2.3.0 updates are deferred until a compatible getbible-mcp release is published. The current 2.1.3 release also requires MCP 2.2.0.
• Pydantic 2.13.5 requires pydantic_core==2.46.5 exactly; restore that pin instead of the incompatible 2.49.0.

The dashboard audit also found GHSA-68fv-2mgg-jv7q in source-map-js 1.2.1. Update only that transitive lock entry to the fixed 1.2.2 release. Vite and all other dashboard packages retain their existing versions.

Synchronize VERSION and all Docker image defaults to 3.2.7.

Validation:

• Dashboard installation, strict runtime/development audit (zero vulnerabilities), 46 frontend tests, vendor checks and reproducible asset build.
• Fresh isolated hashed build-tool/runtime installs and pip check for all three runtimes; full resolved audits report zero findings.
• Combined wheel-only resolution for Python 3.12, 3.13 and 3.14 on x86_64 and aarch64.
• Local syntax, ShellCheck and dependency compatibility checks pass. The complete local run reaches 502 Python tests and all CLI groups. Two Python errors and the image-update/upgrade-selection CLI failures are workspace-only UID/PID restrictions (UID 65534 cannot be mapped and sandbox PIDs differ from /proc); tests are unchanged. The full hosted CI and native/Docker acceptance checks verify these paths on normal runners.