fix: pin bcrypt<4.1 to restore /auth/login — passlib incompatible with bcrypt 4.1+, caused 500 on login and blocked /chat/steps

Made-with: Cursor

agent/requirements.txt

@@ -9,7 +9,7 @@ python-dotenv
 pytest
 pytest-asyncio
 passlib[bcrypt]
-bcrypt>=3.2,<4.0
+bcrypt>=3.2,<4.1  # passlib incompatible with bcrypt 4.1+
 python-jose[cryptography]
 
 # cache-bust-1772149708