fix(workers): use vanir release candidate version (#4079)

Grab vanir from the test PyPI repository to un-break our tests.
Once it's released properly we should change it to get it from PyPI
proper.

Author: michaelkedar

gcp/workers/worker/poetry.lock

@@ -11,9 +11,9 @@ dependencies = [
     "redis==5.3.1",
     "packageurl-python==0.17.5",
     "pygit2==1.18.2",
-    "requests==2.32.4",
+    "requests==2.32.5",
     "jsonschema==4.25.1",
-    "vanir==1.0.1",
+    "vanir==1.0.2rc1",
     "osv",
 ]
 
@@ -22,11 +22,18 @@ package-mode = false
 
 [tool.poetry.dependencies]
 osv = { path = "../../../", develop = true }
+vanir = { source = "test-pypi" }
 
 [tool.poetry.group.dev.dependencies] 
 yapf = "*"
 pylint = "*"
 
+
+[[tool.poetry.source]]
+name = "test-pypi"
+url = "https://test.pypi.org/simple/"
+priority = "explicit"
+
 [build-system]
 requires = ["poetry-core>=2.0.0"]
 build-backend = "poetry.core.masonry.api"