* fix(sca): match CVE suppressions case-insensitively

* chore(ci): pin pipenv on all python versions

* chore(ci): pin pipenv and bump danger-check to node 20