chore: bump requests to 2.33.0 and nbconvert to 7.17.0 to fix CVEs

- requests >= 2.33.0: fixes CVE-2026-25645 (predictable temp file path in extract_zipped_paths)
- nbconvert >= 7.17.0: fixes CVE-2025-53000

Co-authored-by: aieng-bot <aieng-bot@vectorinstitute.ai>

Author: aieng-bot[bot]

pyproject.toml

@@ -10,7 +10,9 @@ dependencies = [
     "aieng-topic-impl",
     "filelock==3.25.2",
     "jupyterlab>=4.4.8",
+    "nbconvert>=7.17.0",
     "pip>=25.3",
+    "requests>=2.33.0",
     "urllib3>=2.6.0",
     "virtualenv==21.2.0",
 ]