Pin socketdev to 3.5.0

Ingest the SDK release that bounds its own runtime dependency ranges,
so the pinned closure is hygienic end to end.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Signed-off-by: lelia <2418071+lelia@users.noreply.github.com>

Author: lelia

CHANGELOG.md

@@ -8,7 +8,7 @@
   several were previously unpinned or open ranges.
 - Replaced the `bs4` shim package with a direct, pinned `beautifulsoup4`
   dependency (the shim provided no version control over the actual library).
-- Pinned the bundled `socketdev` SDK to `3.4.2` (previously `>=3.3.0,<4.0.0`).
+- Pinned the bundled `socketdev` SDK to `3.5.0` (previously `>=3.3.0,<4.0.0`).
 - Docker images now install Python dependencies from the committed `uv.lock`
   with pip hash verification (`--require-hashes`), so image builds no longer
   resolve dependency versions from PyPI at build time. `pip check` validates

pyproject.toml

@@ -16,7 +16,7 @@ dependencies = [
     "GitPython==3.1.57",
     "packaging==26.2",
     "python-dotenv==1.2.2",
-    "socketdev==3.4.2",
+    "socketdev==3.5.0",
     "beautifulsoup4==4.14.3",
     "markdown==3.10.2",
     "brotli==1.2.0; platform_python_implementation == 'CPython'",