Fix 15 Dependabot security vulnerabilities by updating dependencies

Bumps black (25.1.0→26.5.1), requests (2.32.4→2.34.2), urllib3
(2.5.0→2.7.0), idna (3.10→3.17), pillow (11.3.0→12.2.0), fonttools
(4.59.0→4.63.0), and pygments (2.19.2→2.20.0) to versions that resolve
all open Dependabot alerts (#3–#18).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: Res260

ctf/common/models.py

@@ -140,3 +140,10 @@ class TrackYaml(BaseModel):
     contacts: TrackContacts
     instances: TrackInstances | None = None
     flags: list[TrackFlag]
+
+
+class CtfConfig(BaseModel):
+    name: str | None = None
+    uses_cfss: bool = True
+    frontend: Literal["discourse"] | None = "discourse"
+    disabled_validators: list[str] = []