Fix slow pip install

[spolisar]

Fix the standard (non-uv) pip installation speed issue by pinning sub-dependencies to versions borrowed from the uv.lock file.

We may want to bump the pytest dependency in timecopilot-toto to match the version here.
We can't support python version 3.13+ until timecopilot-granite-tsfm gets a support bump to 3.13+. The upstream granite-tsfm repo has support capped at 3.13.

[AzulGarza]

thanks @spolisar!

re: pytest, since it's a test dep are we good to merge this version?

lgtm

[spolisar]

@AzulGarza should be fine, the timecopilot-toto's pytest dependency isn't separated out into a dev/test dependency though. It's in a different repo, so it isn't too significant.