bump req 0.5 -> 0.7

[gabrielmancini]

• req 0.5.18 VULNERABLE!

  EEF-CVE-2026-49755 (HIGH)
  aka: CVE-2026-49755, GHSA-655f-mp8p-96gv
  Decompression bomb DoS in Req via auto-decoded archive and compressed response bodies
  https://osv.dev/vulnerability/EEF-CVE-2026-49755

  EEF-CVE-2026-49756 (LOW)
  aka: CVE-2026-49756, GHSA-px9f-whj3-246m
  Multipart form-data header injection in Req via unescaped name/filename/content_type
  https://osv.dev/vulnerability/EEF-CVE-2026-49756