Update the version of the second bandit hook

[mcdonnnj]

🗣 Description

This pull request updates the bandit (everything else) hook to use the latest version of bandit. It also includes some cleanup for the explanatory comments for both bandit hooks.

💭 Motivation and context

This hook was not kept in sync with updates to the bandit (tests tree) hook and is using an older version of bandit. The comments make this configuration consistent with cisagov/skeleton-packer#188 and cisagov/skeleton-python-library#111.

🧪 Testing

Automated tests pass.

✅ Pre-approval checklist

• This PR has an informative and human-readable title.
• Changes are limited to a single goal - eschew scope creep!
• All relevant type-of-change labels have been added.
• I have read the CONTRIBUTING document.
• These code changes follow cisagov code standards.
• All new and existing tests pass.

[jsf9k]

Please remove the checkbox about adding tests in the PR description.

[mcdonnnj]

Please remove the checkbox about adding tests in the PR description.

Tests have been added and/or modified to cover the changes in this PR.

This PR modifies the pre-commit configuration which I would consider part of the testing for this repository. Are we considering linting to be separate/different from testing in this regard? I've always taken "testing" to mean any element of our validation mechanisms.

[jsf9k]

This PR modifies the pre-commit configuration which I would consider part of the testing for this repository. Are we considering linting to be separate/different from testing in this regard? I've always taken "testing" to mean any element of our validation mechanisms.

Yes, but you're not adding tests that "cover the changes in this PR". That's what I think that checkbox is for.

If you disagree just leave it, and you can try to convince me later. I don't want to hold up the train for what is a flea-sized point.

[jsf9k]

Feel free to merge this without a second review, since @dav3r is out of the office right now.