chore(deps): django-otp 1.7.5, paramiko 5.1.0, python-socketio 5.18.1, python-engineio 4.15.1

The updates on the login, SSH and serial console paths:
- django-otp 1.7.5 revokes the session of a device that is no longer
  confirmed.
- python-engineio 4.15.1 and python-socketio 5.18.1 refuse requests and
  events before the connection completes, HTTP requests after the
  upgrade to WebSocket, and ../ in static file paths.
- paramiko 5.1.0 fixes agent keys and the default RSA signature
  algorithm.

django-rest-knox 5.1.1 changes only its project's references, and
django-auth-ldap 5.4.0 drops Python 3.10, which the panel supports;
both stay.

conf/requirements.txt

@@ -1,6 +1,6 @@
 Django==5.2.18
 django_bootstrap5==26.3
-django-otp==1.7.4
+django-otp==1.7.5
 # for websockify; a host's python3-requests would
 # otherwise bring idna, requests and urllib3 with advisories
 idna>=3.15
@@ -15,11 +15,11 @@ gunicorn==26.2.0
 libvirt-python>=9.0.0
 lxml>=6.1
 openpyxl==3.1.5
-paramiko==5.0.0
+paramiko==5.1.0
 psycopg[binary]==3.3.6
 pycdlib==1.22.0
-python-engineio==4.14.0
-python-socketio==5.17.0
+python-engineio==4.15.1
+python-socketio==5.18.1
 segno==1.6.6
 websockify==0.13.0
 whitenoise==6.12.0