Bump flake8-bandit To v3

Bumps flake-bandit to v3 to fix an incompatibility with the bandit
package.

This also bumps flake8-annotations to a legally acceptable version,
which introduces ANN401, which disallows `typing.Any` annotations (for
the most part, refer to the docs).

Signed-off-by: Hassan Abouelela <[email protected]>

Author: HassanAbouelela