CI: py2: freeze bandit version
CI: py2: freeze bandit version

Newer bandit versions are incompatible with py2

Signed-off-by: Martin Bašti <388356a3851efe39ff0604de6d8fb2e16e10a0b7@redhat.com>

projectatomic/osbs-client,projectatomic/osbs-client