fix: pin Pipenv Python version for Dependabot

[MickeyWzt]

Summary

• pin the Pipenv development environment to Python 3.10
• refresh only the Pipfile.lock metadata hash
• keep the package compatibility range (python_requires >=3.10) unchanged

Why

Dependabot security updates currently fail before dependency resolution because Pipfile uses python_version = ">=3.10", while Pipenv does not support Python version ranges. The existing lock metadata and the pytest workflow already target Python 3.10, so the exact development-environment pin makes those files consistent and allows Dependabot to proceed.

Failed update evidence: https://github.com/ev-flow/quark-engine/actions/runs/32075681591

Validation

• uvx --python 3.10 --from pipenv==2024.4.1 pipenv verify
• PYTHONUTF8=1 uv run --no-project --python 3.10 python setup.py --version (26.8.1)
• git diff --check

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 78.48%. Comparing base (528c937) to head (eca7686).
⚠️ Report is 4 commits behind head on master.

Additional details and impacted files

@@           Coverage Diff           @@
##           master     #964   +/-   ##
=======================================
  Coverage   78.48%   78.48%           
=======================================
  Files          84       84           
  Lines        7692     7692           
=======================================
  Hits         6037     6037           
  Misses       1655     1655           

Flag	Coverage Δ
unittests	78.48% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[haeter525]

Hi @MickeyWzt, thanks for catching this issue and helping the fix! Merging this now.