Bump aiohttp, idna, PyJWT minimum versions to fix new CVE findings

Safety flagged CRLF/smuggling CVEs in aiohttp<3.13.4, idna<3.15, and
several PyJWT<2.13.0 issues that weren't yet covered by the CI
workflows' -i ignore lists.

Author: thibauult