ci: upgrade bandit version [backport 3.12] (#14415)

Backport 4b9e06a from #14413 to 3.12.

Gets rid of error:

> ModuleNotFoundError: No module named 'pbr'

## Checklist
- [x] PR author has checked that all the criteria below are met
- The PR description includes an overview of the change
- The PR description articulates the motivation for the change
- The change includes tests OR the PR description describes a testing
strategy
- The PR description notes risks associated with the change, if any
- Newly-added code is easy to change
- The change follows the [library release note
guidelines](https://ddtrace.readthedocs.io/en/stable/releasenotes.html)
- The change includes or references documentation updates if necessary
- Backport labels are set (if
[applicable](https://ddtrace.readthedocs.io/en/latest/contributing.html#backporting))

## Reviewer Checklist
- [x] Reviewer has checked that all the criteria below are met 
- Title is accurate
- All changes are related to the pull request's stated goal
- Avoids breaking
[API](https://ddtrace.readthedocs.io/en/stable/versioning.html#interfaces)
changes
- Testing strategy adequately addresses listed risks
- Newly-added code is easy to change
- Release note makes sense to a user of the library
- If necessary, author has acknowledged and discussed the performance
implications of this PR as reported in the benchmarks PR comment
- Backport labels are set in a manner that is consistent with the
[release branch maintenance
policy](https://ddtrace.readthedocs.io/en/latest/contributing.html#backporting)

Co-authored-by: Brett Langdon <[email protected]>

Author: dd-octo-sts[bot]

hatch.toml

@@ -6,7 +6,7 @@ dependencies = [
     "click==8.1.7",
     "cython-lint==0.15.0",
     "codespell==2.4.1",
-    "bandit==1.7.5",
+    "bandit==1.8.2",
     "mypy==1.15.0",
     "coverage==7.3.0",
     "envier==0.6.1",