Bump python version in test/lang/python, add deny.toml entry to silence our security lint for now

Author: def-

deny.toml

@@ -261,6 +261,8 @@ ignore = [
     "RUSTSEC-2024-0388",
     # The creator of the crate `paste` has stated in the [`README.md`](https://github.com/dtolnay/paste/blob/master/README.md) that this project is not longer maintained as well as archived the repository
     "RUSTSEC-2024-0436",
+    # TODO: Remove once https://github.com/MaterializeInc/materialize/pull/34277 lands
+    "RUSTSEC-2025-0134",
 ]
 
 # Must be manually kept in sync with about.toml.

test/lang/python/mzcompose.py

@@ -20,7 +20,7 @@
     Service(
         name="python",
         config={
-            "image": "python:3.9.0-buster",
+            "image": "python:3.14.1-trixie",
             "volumes": [
                 "../../../:/workdir",
             ],

test/lang/python/test.sh

@@ -19,6 +19,6 @@ cd "$(dirname "$0")/../../.."
 
 cd test/lang/python
 
-pip install -r requirements.txt --no-build-isolation
+pip install -r requirements.txt
 
 python -m unittest smoketest