🩹 fix bandit warning

F-Droid server doesn't fetch pip dependencies directly from mercurial/hg repositories. So https://data.safetycli.com/v/62044/f17/ is not affecting us. Hence we can ingore it.