fix(security): pin jinja2>=3.1.5 to prevent CVE-2024-56326

Pins minimum jinja2 version to 3.1.5 in both pyproject.toml and
web/requirements.txt. The installed version (3.1.6) is already patched,
but unpinned dependencies could allow a vulnerable version on fresh
install.

CVE-2024-56326: Jinja sandbox breakout through indirect reference to
format method. Patched in 3.1.5.

Tests: 25/25 passing
Web build: OK

Author: Rohan5commit

pyproject.toml

@@ -12,7 +12,7 @@ dependencies = [
   "typer[all]",
   "rich",
   "openai",
-  "jinja2",
+  "jinja2>=3.1.5",
   "pyyaml",
 ]
 

web/requirements.txt

@@ -1,5 +1,5 @@
 typer[all]
 rich
 openai
-jinja2
+jinja2>=3.1.5
 pyyaml