chore(deps): consolidate dev deps into [project.optional-dependencies] dev

Follow-up to 7c1be58. pytest-randomly was added to a PEP 735
[dependency-groups] dev block by 'uv add --dev', leaving the
project with two 'dev' groups (the legacy [project.optional-
dependencies] dev and the new [dependency-groups] dev). To get
the full dev env someone had to run 'uv sync --extra dev --group
dev', which is easy to miss.

This commit moves pytest-randomly>=4.1 into the
[project.optional-dependencies] dev list (where pytest,
pytest-cov, pytest-asyncio, and httpx already live) and drops
the [dependency-groups] block. 'uv sync --extra dev' now
installs the full dev toolchain. uv.lock updated accordingly:
the [package.dev-dependencies] and [package.metadata.requires-
dev] sections are gone, and pytest-randomly is part of the
standard dev extra.

backend/pyproject.toml

@@ -29,6 +29,7 @@ dev = [
     "pytest-cov>=4.1",
     "pytest-asyncio>=0.23,<1",
     "httpx>=0.27,<1",
+    "pytest-randomly>=4.1",
 ]
 sqlcipher = [
     # SP12: encryption at rest. Optional — without it the DB is plain SQLite.
@@ -51,8 +52,3 @@ where = ["src"]
 testpaths = ["tests"]
 addopts = "-ra --strict-markers"
 asyncio_mode = "auto"
-
-[dependency-groups]
-dev = [
-    "pytest-randomly>=4.1.0",
-]

backend/uv.lock

@@ -394,6 +394,7 @@ dev = [
     { name = "pytest" },
     { name = "pytest-asyncio" },
     { name = "pytest-cov" },
+    { name = "pytest-randomly" },
 ]
 sftp = [
     { name = "paramiko" },
@@ -402,11 +403,6 @@ sqlcipher = [
     { name = "sqlcipher3" },
 ]
 
-[package.dev-dependencies]
-dev = [
-    { name = "pytest-randomly" },
-]
-
 [package.metadata]
 requires-dist = [
     { name = "click", specifier = ">=8.1,<9" },
@@ -419,6 +415,7 @@ requires-dist = [
     { name = "pytest", marker = "extra == 'dev'", specifier = ">=8.0" },
     { name = "pytest-asyncio", marker = "extra == 'dev'", specifier = ">=0.23,<1" },
     { name = "pytest-cov", marker = "extra == 'dev'", specifier = ">=4.1" },
+    { name = "pytest-randomly", marker = "extra == 'dev'", specifier = ">=4.1" },
     { name = "python-multipart", specifier = ">=0.0.9,<1" },
     { name = "pyyaml", specifier = ">=6.0,<7" },
     { name = "sqlalchemy", specifier = ">=2.0,<3" },
@@ -427,9 +424,6 @@ requires-dist = [
 ]
 provides-extras = ["dev", "sqlcipher", "sftp"]
 
-[package.metadata.requires-dev]
-dev = [{ name = "pytest-randomly", specifier = ">=4.1.0" }]
-
 [[package]]
 name = "fastapi"
 version = "0.138.0"