Upgraded cryptography and related dependencies

[orangejenny]

Technical Summary

Resolves https://github.com/dimagi/commcare-hq/security/dependabot/551

Safety Assurance

Safety story

This is a sensitive area - these libraries are mostly used in SSO.

Automated test coverage

There are tests for SSO. I'm not terribly familiar with the area, so I'm also requesting a QA regression of SSO.

QA Plan

https://dimagi.atlassian.net/browse/QA-7124

Rollback instructions

• This PR can be reverted after deploy with no further considerations

Labels & Review

• Risk label is set correctly
• The set of people pinged as reviewers is appropriate for the level of risk of the change

[jingcheng16]

@orangejenny As long as this passed QA, it should be fine. Feel free to ping me once it passed QA.

I looked at a past PR that upgrades pyopenssl, I saw Biyeun request QA to test both saml and oidc. I hope this will be included in QA's test plan.

msal is used by Entra remote user management, I reviewed the changelog for msal and looks good. But this should also be tested by QA, no need to go over all test in remote user management (to save QA's time and effort), just make sure user will be deactivated when removed from Entra is enough, then we know we successfully connected to the app in Entra . Our test didn't actually sending request to any idp, we patched it.

[orangejenny]

Thank you @jingcheng16 for the knowledge, I added notes to the QA ticket.