Bump werkzeug to 3.1.9

Fixes the failing dependency check. Sites with an underscore in the name load without the X-Frappe-Site-Name header, and their links keep the https scheme.