Update Semgrep to 1.168.0 for Python 3.14

[mazen160]

Description

Updates mobsfscan to Semgrep 1.168.0 and adds tested Python 3.14 support. The package now declares Python 3.10+ because Semgrep 1.168.0 no longer supports Python 3.9.

How

• Updated Semgrep pins in setup.py, Pipfile, requirements.txt, Pipfile.lock, and CI
• Regenerated the Pipenv lock and exported requirements for the new dependency graph
• Added Python 3.14 to CI and updated the GitHub Actions runtime versions
• Fixed the OS matrix so macOS jobs run on macOS
• Updated Python support metadata, tox environments, and documentation to Python 3.10+
• Annotated two additional valid SSLContext findings detected by Semgrep 1.168.0
• Disabled Semgrep metrics during rule validation
• Kept the legacy flake8-logging-format plugin working on Python 3.14 with an isolated Setuptools constraint

Why

Semgrep 1.86.0 does not publish Python 3.14-compatible wheels. Semgrep 1.168.0 publishes CPython 3.14 wheels and allows mobsfscan to install and run on Python 3.14.

Testing Notes

Tested locally with Python 3.14.3 and Semgrep core 1.168.0:

• Clean installation from the regenerated requirements.txt
• pip check: no broken requirements
• tox -e lint,bandit,py: passed
• Application tests: 5 passed
• Semgrep strict rule validation: 43 rules, 0 errors
• Semgrep rule tests: 40/40 passed
• pipenv verify: lockfile is up to date