Update deps, including ones prompted by Log4J2

[rtyley]

This is a bit of a general update, but was prompted by Log4J2 vulnerability.

[simone-smith]

We tested Housekeeper by adding a dummy alert to the ophan-alerts DynamoDB table that would fire immediately, to a spoof email address. We then checked the logs to see that the alert was triggered, and subsequently deleted by Housekeeper, which we can see happening here