Bump Python package pins to latest with cp313 arm64 wheels

All 37 packages in requirements_recommended.txt updated to their
latest versions confirmed to ship cp313-compatible macOS wheels
(arm64 direct or universal2) or pure-Python wheels for Python 3.13.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: erikng

requirements_recommended.txt

@@ -61,7 +61,7 @@ PyYAML==6.0.2
 requests==2.32.4
 six==1.17.0
 tokenize-rt==6.2.0
-tomli==2.2.1
-urllib3==2.5.0
-virtualenv==20.31.2
-xattr==1.1.4
+tomli==2.4.1
+urllib3==2.7.0
+virtualenv==21.3.2
+xattr==1.3.0