fix: correct bandit exclude of .venv and .cache Closes #92 See merge request to-be-continuous/python!127
