[codex] Align pyproject dependency pins

[Pigbibi]

Summary

• align pyproject.toml QPK and UsEquityStrategies pins with requirements.txt
• keep package installs and deployment installs on the same shared dependency commits

Validation

• git diff --check
• verified pyproject.toml and requirements.txt resolve the same QPK/UES refs
• .venv/bin/python -m pytest -q ran locally: 70 passed, 1 existing test failed in test_run_strategy_cycle_loads_strategy_plugin_report_and_sends_email because the local venv/runtime returned no strategy_plugins field; this failure is unrelated to the dependency-pin text change and needs separate follow-up if it reproduces in CI.