Bump FastAPI / starlette dependencies to fix CVE

[plaflamme]

The current versions have a CVE opened against them due to their python-multipart dependency https://nvd.nist.gov/vuln/detail/CVE-2024-24762

Obviously this isn't technically a problem for sqlmesh since it's not expected to sitting directly on the intertubes, but this is triggering static analysis tools and is good hygiene in general.

[vchan]

Thanks for reporting this. Looks like FastAPI updated the minimum version of python-multipart to 0.0.7 in their 0.109.1 release. I've pinned SQLMesh UI to 0.110.2.