chore(deps-dev): bump bandit from 1.8.6 to 1.9.4

Bumps [bandit](https://github.com/PyCQA/bandit) from 1.8.6 to 1.9.4.
- [Release notes](https://github.com/PyCQA/bandit/releases)
- [Commits](PyCQA/bandit@1.8.6...1.9.4)

---
updated-dependencies:
- dependency-name: bandit
  dependency-version: 1.9.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

poetry.lock

@@ -36,7 +36,7 @@ files = ["./py_ocsf_models"]
 strict = true
 
 [tool.poetry.group.dev.dependencies]
-bandit = "1.8.6"
+bandit = "1.9.4"
 black = "26.3.1"
 flake8 = "7.3.0"
 mypy = "1.19.1"