Update Analysis docker image to use a venv or not pin system dependencies

need to create with --site-packages for qgis to enable easy upgrades to vulnerable system dependencies (example urllib3)
or... separate these from requirements and update the system image dependencies on build.

venv
```bash
RUN python3 -m venv /opt/venv
ENV PATH="/opt/venv/bin:$PATH"

RUN pip install -r requirements.txt
```
change requirements.txt (This might be harder for feature development since we use UV) to remove these system managed dependencies
```
urllib3
requests
certifi
idna
charset-normalizer
six
python-dateutil
attrs
```

Start by locating the Analysis Docker image definition and its requirements.txt; compare the venv approach with separating system-managed dependencies while checking how UV is used for feature development. Done means the image builds with the chosen dependency strategy, QGIS remains usable, and system dependencies such as urllib3 can be upgraded without being pinned by requirements.txt.

Written by the indexing model from the issue text.