deps: update safety requirement to >=3.7.0

- Updates `requirements.txt` to require `safety>=3.7.0` (was `>=2.0.0`).
- Updates `requirements-dev.txt` to match.
- Updates `requirements-py311.txt` lock file to `safety==3.7.0`.
- Updates `scripts/validate-dependencies.sh` to support Python 3.12 (current env).

Verified with `scripts/validate-dependencies.sh` and `scripts/check-compliance.sh`.
Supersedes PR #108.

Author: google-labs-jules[bot]

requirements-dev.txt

@@ -12,7 +12,7 @@ testinfra
 
 # Security tools for CI/CD
 bandit>=1.7.0
-safety>=2.0.0
+safety>=3.7.0
 
 # Container testing (Podman specific)
 molecule-podman

requirements.txt

@@ -23,7 +23,7 @@ passlib>=1.7.4
 
 # Security tools
 bandit>=1.7.0
-safety>=2.0.0
+safety>=3.7.0
 
 # Development and testing tools
 pre-commit>=2.15.0

scripts/validate-dependencies.sh

@@ -85,14 +85,17 @@ main() {
 
 check_python_dependencies() {
     log_info "Checking Python dependencies..."
-    
-    # Check if Python 3.11 is available
-    if command -v python3.11 &> /dev/null; then
+
+    # Check for Python versions (3.12, 3.11, 3.9)
+    if command -v python3.12 &> /dev/null; then
+        PYTHON_VERSION=$(python3.12 --version)
+        log_success "Python 3.12 found: $PYTHON_VERSION"
+    elif command -v python3.11 &> /dev/null; then
         PYTHON_VERSION=$(python3.11 --version)
         log_success "Python 3.11 found: $PYTHON_VERSION"
     elif command -v python3.9 &> /dev/null; then
         PYTHON_VERSION=$(python3.9 --version)
-        log_warning "Python 3.9 found (recommend 3.11): $PYTHON_VERSION"
+        log_warning "Python 3.9 found (recommend 3.11+): $PYTHON_VERSION"
     else
         log_error "No compatible Python version found"
         return 1
@@ -165,7 +168,7 @@ generate_dependency_report() {
   "validation_results": {
     "python": {
       "version": "${PYTHON_VERSION:-unknown}",
-      "status": "$(command -v python3.11 &> /dev/null && echo "ok" || echo "warning")"
+      "status": "$({ command -v python3.12 || command -v python3.11; } &> /dev/null && echo "ok" || echo "warning")"
     },
     "ansible": {
       "installed": $(command -v ansible &> /dev/null && echo "true" || echo "false"),