Update python and setuptools for CVE concerns

[nicholas-lockhart]

Summary

Type of change

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• This change requires a documentation update

Checklist:

• Jira story/task is put into PR title
• Code has been self-reviewed
• Hard-to-understand areas have been commented
• Documentation has been updated
• My changes generate no new warnings
• Unit tests have been added for base functionality and known edge cases
• Any dependent changes have been merged and published in downstream modules

[Sung96kim]

closing since we've now moved off setuptools and is also using uv