feat: Bump bandit to 1.9.4 [TCE-1554] (#80)

Bump Bandit from 1.8.3 to 1.9.4 and update the generated docs to match the
1.9.4 pattern set.

Patterns added:   B415 (import_pyghmi), B613 (trojansource),
                  B614 (pytorch_load), B615 (huggingface_unsafe_download),
                  B704 (markupsafe_markup_xss)
Patterns removed: B109, B111, B309, B320, B322, B325, B410, B414

- requirements.txt: bandit 1.8.3 -> 1.9.4
- docs/patterns.json + description.json: regenerated for the 1.9.4 set
  (75 patterns); levels/subcategories/enabled of existing patterns preserved
- docs/description: add markdown for the 5 new patterns, remove the 8 dropped
- docs/tests: add pattern tests for the 5 new patterns
- .circleci/config.yml: bump codacy/base 12.1.5 -> 13.1.0 and
  codacy/plugins-test 2.0.11 -> 2.1.2

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

Author: stefanvacareanu7

.circleci/config.yml

@@ -1,8 +1,8 @@
 version: 2.1
 
 orbs:
-  codacy: codacy/base@12.1.5
-  codacy_plugins_test: codacy/plugins-test@2.0.11
+  codacy: codacy/base@13.1.0
+  codacy_plugins_test: codacy/plugins-test@2.1.2
 
 workflows:
   version: 2