Update dependencies and replace bandit with ruff security rules

[jashparekh]

• Update dependencies in requirements.txt, requirements-test.txt, and requirements-docs.txt
• Replace bandit with ruff's flake8-bandit (S) rules for security scanning
• Remove bandit job from CI workflow (now handled by ruff check)
• Fix lock_requirements.sh to properly generate lock file with all dependencies
• Update devbox.dockerfile to install only from lock file
• Combine ruff linter and formatter steps in run_tests.sh

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 96.64%. Comparing base (8d6b3ad) to head (44be14a).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #596   +/-   ##
=======================================
  Coverage   96.64%   96.64%           
=======================================
  Files           5        5           
  Lines         328      328           
  Branches       43       43           
=======================================
  Hits          317      317           
  Misses          5        5           
  Partials        6        6           

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.