Bump cryptography and starlette to clear Dependabot alerts

Re-lock to patch all five open advisories:
- cryptography 48.0.0 -> 49.0.0 (GHSA-537c-gmf6-5ccf, high)
- starlette 1.0.1 -> 1.3.1 (GHSA-82w8-qh3p-5jfq high,
  GHSA-wqp7-x3pw-xc5r high, GHSA-x746-7m8f-x49c moderate,
  GHSA-jp82-jpqv-5vv3 low)

Raise the direct cryptography floor to >=48.0.1 so a fresh resolve
cannot reintroduce the vulnerable range.

Author: JE-Chen

pyproject.toml

@@ -21,7 +21,7 @@ dependencies = [
     "python-Xlib==0.33;platform_system=='Linux'",
     "mss==10.2.0",
     "defusedxml==0.7.1",
-    "cryptography>=42.0.0"
+    "cryptography>=48.0.1"
 ]
 classifiers = [
     "Programming Language :: Python :: 3.10",