#920 uv.lock + dependency bumps: migretti 0.10, bulkman 2.0.4, resilient-circuit <0.9, scriptplan 0.10, auth 3.3

EARS SPEC: - Each repo (highway, highway-core, jumper) shall have a uv.lock used by the Docker build. - The stack shall run migretti>=0.10, bulkman>=2.0.4, resilient-circuit>=0.8,<0.9, scriptplan>=0.10. - If any library setup command in migrations-entrypoint.sh fails, then the migrations service shall exit non-zero. - RC_DB_STRICT=1 shall be set so the breaker never falls back to in-memory storage. Parent epic: #913. Synthesis (technical problems / solution domains / alternatives) recorded as a comment when started.