Update pyproject.toml with defusedxml in web

[kkaris]

This PR adds defusedxml as a dependency in web to avoid ModuleNotFoundError on startup.

Closes #1336.

[bgyori]

Thanks so much for looking into this so promptly! One thing I am confused about is that we do seem to have curies[fastapi] listed here https://github.com/biopragmatics/bioregistry/blob/main/pyproject.toml#L136 and in turn defusedxml is listed in the fastapi dependencies at https://github.com/biopragmatics/curies/blob/main/pyproject.toml#L82. What could explain this?

[bgyori]

I think the more appropriate solution would be to limit to curies[fastapi]<0.10 for now, this is because the issue is not explicitly limited to just defusexml (see biopragmatics/curies#147).

[kkaris]

The latest image, c4cc41f73811 from Dec 28, seems to work fine. Closing this PR.