Update requests and idna to patched versions

[piiq]

This is a PR dealing with dependencies and their security.

• idna and requests were upgraded to patched versions
• anyio direct pin in core's pyproject.toml was removed since it's a third level dependency and we support v4 syntax
• dev dependencies group was removed from cli as it was messing up the dev_install script and overwriting installation of local devtool with pypi ones