fix: bump pyasn1 for CVE-2026-59885 (backport #6330) (#6332)

bump to >=0.6.4 for CVE-2026-59885 as outlined in
GHSA-8ppf-4f7h-5ppj<hr>This is an automatic backport of pull request
#6330 done by [Mergify](https://mergify.com).

---------

Signed-off-by: Charlie Doern <cdoern@redhat.com>
Co-authored-by: Charlie Doern <cdoern@redhat.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

Author: 3 people

pyproject.toml

@@ -23,7 +23,7 @@ constraint-dependencies = [
     "msgpack>=1.2.1",
     "pillow>=12.3.0",                  # CVE-2026-42311: PSD RCE; CVE-2026-55379/55380/54060: font/GD DoS
     "protobuf>=5.29.6",               # CVE-2025-4565 + CVE-2026-0994: parsing vulnerabilities
-    "pyasn1>=0.6.3",                   # CVE-2026-30922: DoS via unbounded recursion
+    "pyasn1>=0.6.4",                   # CVE-2026-30922: DoS via unbounded recursion
     "pydantic-settings>=2.14.2",
     "python-engineio>=4.13.2",
     "python-multipart>=0.0.31",        # CVE-2026-40347: header injection; CVE-2026-42561: DoS via oversized headers