Bump pygments from 2.19.2 to 2.20.0

Bump cryptography from 46.0.5 to 46.0.6

Bump requests from 2.32.5 to 2.33.0

switch default branch master -> main

update changelog

add admin tests for coverage

add more admin tests for coverage

broaden bandit triggers

remove unnecessary mark_safe, potentially vulnerable to xss

Add bandit security scanning to CI

reinclude lockfile - need it to avoid mysql builds

fix test path restriction

Merge pull request #870 from jazzband/dependabot/github_actions/gha-updates-b974f349ee

Bump github/codeql-action from 4.32.4 to 4.32.6 in the gha-updates group

Merge pull request #869 from bckohan/ci_updates