Clean up the pip-audit result by bumping some deps.
Ignore some that aren't applicable to the run-time> .

build: Update PyOpenSSL to version 24.1.0

cryptography removed X509_V_FLAG_NOTIFY_POLICY which is still
imported when using the pysatochip package but unused.

To fix this we update pyOpenSSL to version 24.1.0

https://github.com/pyca/cryptography/pull/9163
https://github.com/pyca/pyopenssl/pull/1213

File "/tmp/.mount_Electrig7PIy/usr/lib/python3.11/site-packages/pysatochip/certificate_validator.py", line 6, in <module>
  import OpenSSL
File "/tmp/.mount_Electrig7PIy/usr/lib/python3.11/site-packages/OpenSSL/__init__.py", line 8, in <module>
  from OpenSSL import crypto, SSL
File "/tmp/.mount_Electrig7PIy/usr/lib/python3.11/site-packages/OpenSSL/crypto.py", line 1556, in <module>
  class X509StoreFlags(object):
File "/tmp/.mount_Electrig7PIy/usr/lib/python3.11/site-packages/OpenSSL/crypto.py", line 1575, in X509StoreFlags
  NOTIFY_POLICY = _lib.X509_V_FLAG_NOTIFY_POLICY

This is a backport of electroncash#2796 and electroncash#2815

Also deduplicate some determinstic requirements in requirements-hw.txt

Depends on D15868

Build all release binaries, check that the executables work