fix: bump pyasn1 for CVE-2026-59885 (backport #6330)

[mergify]

bump to >=0.6.4 for CVE-2026-59885 as outlined in GHSA-8ppf-4f7h-5ppj

---

This is an automatic backport of pull request #6330 done by Mergify.

[mergify]

Cherry-pick of d6e9242 has failed:

On branch mergify/bp/release-1.0.x/pr-6330
Your branch is up to date with 'origin/release-1.0.x'.

You are currently cherry-picking commit d6e92423.
  (fix conflicts and run "git cherry-pick --continue")
  (use "git cherry-pick --skip" to skip this patch)
  (use "git cherry-pick --abort" to cancel the cherry-pick operation)

Unmerged paths:
  (use "git add <file>..." to mark resolution)
	both modified:   pyproject.toml
	both modified:   uv.lock

no changes added to commit (use "git add" and/or "git commit -a")

To fix up this pull request, you can check it out locally. See documentation: https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/checking-out-pull-requests-locally