fix: unlock and bump werkzeug

[dpgaspar]

SUMMARY

Unlocks and bumps Werkzeug to 3.0.1.
Locked here: #23965

The following dependencies need to be bumped also to unlock Werkzeug:

• Flask-AppBuilder done here
• Flask-Login
• Flask-Wtf

Note:
Using OpenID (not OpenID connect) will not be compatible with this bump, but users will not be forced to do it.
Flask-AppBuilder as deprecated this form of Auth.

BEFORE/AFTER SCREENSHOTS OR ANIMATED GIF

TESTING INSTRUCTIONS

ADDITIONAL INFORMATION

• Has associated issue:
• Required feature flags:
• Changes UI
• Includes DB Migration (follow approval process in SIP-59)
  • Migration is atomic, supports rollback & is backwards-compatible
  • Confirm DB migration upgrade and downgrade tested
  • Runtime estimates and downtime expectations provided
• Introduces new feature or API
• Removes existing feature or API

[villebro]

Linking the original PR that added bounds on werkzeug: #23965

[villebro]

LGTM

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (f7c5773) 67.19% compared to head (ddde709) 67.20%.

Additional details and impacted files

@@           Coverage Diff           @@
##           master   #27164   +/-   ##
=======================================
  Coverage   67.19%   67.20%           
=======================================
  Files        1905     1905           
  Lines       74498    74498           
  Branches     8323     8323           
=======================================
+ Hits        50061    50067    +6     
+ Misses      22382    22376    -6     
  Partials     2055     2055           

Flag	Coverage Δ
mysql	77.99% <ø> (-0.02%)	⬇️
postgres	78.12% <ø> (+0.01%)	⬆️
python	78.26% <ø> (+0.01%)	⬆️
sqlite	77.63% <ø> (+0.01%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.