Lock python deps versions in sql registry

[blrchen]

Description

This PR locks pip version for a few recent new deps

• cython: according to @enya-yx , this is required for sql registry to work on her dev environment, use latest version
• pydantic: removed, this is an indirect dep consumed by fastapi.
• sqlalchemy: this is newly added by @xiaoyongzhu for sandbox support, use latest version.

How was this PR tested?

Does this PR introduce any user-facing changes?

• No. You can skip the rest of this section.
• Yes. Make sure to clarify your proposed changes.