chore(dependencies): add upper bounds for numpy/pandas

[wpbonelli]

Add upper bounds to numpy and pandas in pyproject.toml, and remove --prerelease-allow from uv sync command in smoke tests. CI was failing because these two factors combined to allow prerelease versions of numpy and pandas, which broke some tests. The intent behind --allow-prerelease was to get a prerelease version of vtk on ARM macs, but seems a full version is now available on PyPI.

I think this might clear the way to switch CI to pixi if we want, as described in #2424

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 72.6%. Comparing base (556c088) to head (8f0aa3e).
⚠️ Report is 91 commits behind head on develop.

Additional details and impacted files

@@             Coverage Diff             @@
##           develop    #2662      +/-   ##
===========================================
+ Coverage     55.5%    72.6%   +17.1%     
===========================================
  Files          644      667      +23     
  Lines       124135   129360    +5225     
===========================================
+ Hits         68947    93990   +25043     
+ Misses       55188    35370   -19818     

see 559 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.