Dependency brotli 1.1.0 has security vulnerability, update to brotli>=1.2.0

[jbousquin]

What happened?

pynhd 0.19.4 current dependency list contains brotli
v1.1.0 has a vulnerability, see google/brotli#1373
latest version of brotli has been released on PyPI that addresses this issue

I think this should be a simple one-line fix in the two env files:
ci/requirements/environment.yml
ci/requirements/environment-dev.yml

Minimal Complete Verifiable Example

Pinning the version in my repo (private) resolved and didn't seem to have dependency conflicts w/ pynhd

MVCE confirmation

• Minimal example — the example is as focused as reasonably possible to demonstrate the underlying issue.
• Complete example — the example is self-contained, including all data and the text of any traceback.
• New issue — a search of GitHub Issues suggests this is not a duplicate.

[cheginit]

@jbousquin Thank you! I will pin the version.

[jbousquin]

Might want to pin urllib3>=2.6 at the same time