Upgrade Python from 3.11 to 3.12 across all services

[devin-ai-integration]

Upgrade Python from 3.11 to 3.12 across all services

Summary

This PR upgrades Python from version 3.11 to 3.12 across the entire XFD codebase, including Docker images, GitHub Actions workflows, pre-commit configuration, AWS Lambda runtime, and Python dependencies.

Key changes:

• Updated all Docker base images to Python 3.12 (worker, pe, python)
• Updated GitHub Actions workflows to use Python 3.12
• Updated AWS Lambda runtime to python3.12 in serverless.yml
• Upgraded numpy from 1.24.3 to 1.26.4 (required for Python 3.12 compatibility)
• Fixed bandit pre-commit hook by adding pbr as additional dependency
• Updated pre-commit language_version to python3.12

Note: This PR initially targeted Python 3.13 but pivoted to 3.12 due to ecosystem compatibility issues with numpy and zstandard/cffi packages. Python 3.12 provides better package ecosystem support with prebuilt wheels.

Review & Testing Checklist for Human

• Verify all CI checks pass, especially the build_worker job which previously failed with numpy compatibility issues
• Test worker Docker builds in staging/integration environments to ensure scanning functionality works correctly with numpy 1.26.4
• Verify AWS Lambda python3.12 runtime is available and working in target regions (especially GovCloud for production)
• Run integration tests against staging API to verify no breaking changes from numpy upgrade
• Test pre-commit hooks locally by running pre-commit run --all-files to ensure bandit works with pbr dependency

Test Plan

1. Deploy to integration environment and verify all Lambda functions start successfully
2. Run a full scan cycle (all scan types) to verify worker functionality with new Python version
3. Check CloudWatch logs for any Python 3.12-specific errors or warnings
4. Verify vulnerability scanning data is processed correctly with numpy 1.26.4

Notes

• The branch name references Python 3.13 but the actual upgrade is to Python 3.12 (due to the pivot during development)
• The bandit fix uses additional_dependencies: [pbr] as a workaround rather than upgrading bandit itself (keeping changes minimal)
• CONTRIBUTING.md and setup-env script did not require updates as they use generic Python version references
• Django 5.2.6 and FastAPI 0.116.2 are both compatible with Python 3.12

---

Link to Devin run: https://app.devin.ai/sessions/5bff2523f83540728718336abe92c688
Requested by: Zoheb Munshi (@zohebmunshi)

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment and CI monitoring