build(deps): bump torch to 2.13.0 to fix CVE-2025-3000

torch <= 2.12.1 is vulnerable to memory corruption via torch.jit.script
(GHSA-rrmf-rvhw-rf47 / CVE-2025-3000). Re-lock to 2.13.0, which pulls in
updated CUDA/nvidia/triton transitive deps.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: 2 people