[ESI][Runtime] Bumping JSON library to avoid CVEs

v3.11.2 had a requirements.txt file which had some python libs which
have the following security alerts:

CVE-2022-21797, joblib 1.1.0, Critical
CVE-2023-40267, gitpython 3.1.27, Critical

lib/Dialect/ESI/runtime/CMakeLists.txt

@@ -38,7 +38,7 @@ find_package(ZLIB REQUIRED)
 # JSON parser for the manifest.
 FetchContent_Declare(json
   GIT_REPOSITORY https://github.com/nlohmann/json.git
-  GIT_TAG        v3.11.2
+  GIT_TAG        v3.11.3
 )
 FetchContent_MakeAvailable(json)