chore(deps): bump pillow from 12.1.1 to 12.2.0 in /requirements

Fixes GHSA-whj4-6x5x-4v2j (CVE-2026-40192): FITS GZIP decompression bomb
in Pillow. Affected versions: >= 10.3.0, < 12.2.0.

Author: matrixise

requirements/dev.txt

@@ -142,7 +142,7 @@ packaging==26.0
     #   pip-audit
     #   pip-requirements-parser
     #   pipdeptree
-pillow==12.1.1
+pillow==12.2.0
     # via
     #   -c main.txt
     #   pillow-heif

requirements/main.txt

@@ -117,7 +117,7 @@ packaging==26.0
     # via gunicorn
 pandas==3.0.1
     # via -r main.in
-pillow==12.1.1
+pillow==12.2.0
     # via
     #   pillow-heif
     #   wagtail