Update starlette to fix CVE-2026-48710 vulnerability

[TWDBrob]

There is a vulnerability in Starlette that allows an attacker to bypass auth. The latest version of Starlette addresses it.

https://arstechnica.com/information-technology/2026/05/millions-of-ai-agents-imperiled-by-critical-vulnerability-in-open-source-package/

https://github.com/x41sec/poc/blob/master/starlette-host-header/README.md

[TaimoorByteNinja]

Hi, I’d like to take this issue (#385).
I’ll open a PR updating Starlette for CVE-2026-48710 with tests.