chore: update all python dependencies

[s3lph]

Update all Python dependencies. Also did a pip freeze to get a somewhat reproducible environment. The only thing intentionally not frozen is pytz because tzdata gets updated quite often.

This also allows Dependabot to actually propose PRs to fix issues; e.g. we currently have one report where Dependabot can't open a PR because we don't depend on Jinja directly - I'm not even sure if we got notified about this.

I've built and ran the site locally and checked for any obvious errors, so far everything looked exactly like before.

[s3lph]

Soo... apparently we're still using a rather old Python image in our Dockerfile, so old that the build now fails. I've also noticed that the nginx base image we use is rather old. I'll update and test the Dockerfile as well.

[s3lph]

Dockerfile updated, ready for review

[dbrgn]

I'm not a huge fan of pinning dependencies directly in requirements.txt, but we should move to uv anyways, so this is fine as transitional approach 🙂 (An alternative would be pip-tools which supports locking deps while sticking to pip, but uv is just so much nicer.)

[s3lph]

o.O never heard of uv before, gotta look that up.

[dbrgn]

Definitely, uv is the best thing in Python world since sliced bread. It essentially fixes Python packaging.