Fix security vulnerabilities in dependencies

Security updates:
- Update filelock from 3.18.0 to 3.20.1 (fixes GHSA-w853-jp5j-5j7f)
- Update urllib3 from 2.5.0 to 2.6.0 (fixes GHSA-gm62-xv2j-4w53, GHSA-2xpw-w6gg-jr37)

Severity: High

Vulnerabilities fixed:
- filelock: TOCTOU race condition allowing local attackers to corrupt/truncate files via symlink attacks
- urllib3: Unbounded HTTP encoding chain causing high CPU and memory usage
- urllib3: Excessive resource consumption when streaming compressed responses

Co-authored-by: AI Engineering Maintenance Bot <[email protected]>

Author: amrit110

pyproject.toml

@@ -8,7 +8,9 @@ license = "Apache-2.0"
 repository = "https://github.com/VectorInstitute/implementation-catalog"
 requires-python = ">=3.12"
 dependencies = [
+    "filelock==3.20.1",
     "pyyaml>=6.0.2",
+    "urllib3==2.6.0",
 ]
 
 [dependency-groups]