chore: bump cookiecutter version upper bound

[apirogov]

Description

Bumped up cookiecutter.

I install invenio-cli on the global level, where I also want to use a newer cookiecutter version because of new features such as "private variables" in the template.

Checklist

Ticks in all boxes and 🟢 on all GitHub actions status checks are required to merge:

• [X] I'm aware of the code of conduct.
• [X] I've created logical separate commits and followed the commit message format.
• [X] I've added relevant test cases.
• [X] I've added relevant documentation.
• [X] I've marked translation strings (for relevant code).
• [X] I've followed the CSS/JS and React guidelines (for relevant code).
• [X] I've followed the web accessibility guidelines (for relevant code).
• [X] I've followed the user interface guidelines (for relevant code).
• [X] I've identified the copyright holder(s) and updated copyright headers for touched files (>15 lines contributions).
• [X] I've NOT included third-party code (copy/pasted source code or new dependencies).

[apirogov]

@max-moser just marked you for review because you just commented on the other PR ;)

Is there a way to trigger the tests with a non-cached version? I just noticed in the pipeline it used the cached cookiecutter 1.7.3...

Also, a general question: how to know whom to ask for review for a PR?