look into using poetry for dependency management

[edaniszewski]

pip-compile has worked for us in the past, but it seems like there are limitations with it, and poetry is pretty widely adopted and used.

recently, one issue with pip-compile was that in doing an update, it updates all dependencies. I just needed to update one, but a separate dependency was updated as well to a new major version which included a bug. Luckily this was caught by a test failure here, but it does showcase how updating all deps can be a bit heavy-handed at times.

It's not necessarily something we need to adopt, but I think its worth investigating and seeing if it can simplify/reduce issues in our dependency management workflow.