Update requirements for pip install

This MR updates the minimum requirements for pip-installing this project, to avoid known vulnerabilities.

This leaves the Debian and RedHat packaging to install whatever versions are available for those distributions, under the assumption that the distribution maintainers will patch serious vulnerabilities; the CI/CD pipeline asserts that whatever versions we do get for those actually work.