2.8.3: dependency sweep (x402 2.22, eth stack majors, agentscore-py 2.6.8 floor)

[vvillait88]

Summary

Dependency sweep, 2026-09-05, and the 2.8.3 version bump. The lock moves x402 2.21.0 to 2.22.0 (the release relocated the per-network default assets into a default_assets.py table; the Base mainnet USDC entry is unchanged at "USD Coin", version "2", 6 decimals, which is the only domain hash we depend on), the eth stack majors that the x402 and web3 chain now require (eth-account 0.14.0, eth-keys 0.8.0, eth-keyfile 0.10.0, eth-rlp 3.0.0, rlp 5.0.0, hexbytes 2.0.0, py-ecc 8.0.0), ujson 6.0.0, typer 0.27.2, pydantic 2.13.5, cryptography 50.0.1, stripe 15.6.1, sentry-sdk 2.68.1, django 6.1.1, ruff 0.16.6, ty 0.0.78, and the agentscore-py floor to >=2.6.8. pympp stays at 0.11.0 (current). No prerelease resolved.

Worked with Varun, who asked for the SDK-first sweep.

Type of change

• Bug fix (no breaking change)
• New feature (no breaking change)
• Breaking change (existing callers must update)
• Docs, tests, or internal maintenance only

Public API

none

Test plan

uv lock --upgrade then uv sync --all-extras --all-groups; ruff check, ruff format --check, ty check exit 0; vulture with CI's exact invocation exits 0; pytest 1868 passed, 4 skipped, coverage 95.37%. uv lock re-run after the version bump so the lock's embedded project version matches.

Checklist

• Tests cover the new behavior, and the suite passes locally
• Lint, format, and type checks pass
• Docs and README examples updated if the public surface changed
• No secrets, credentials, or personal data in the diff or the tests