Consider switching to poetry for dependency management

[andylolz]

https://python-poetry.org

[odscjames]

Oh interesting - we just switched to pip-tools :-) But anything that will lock dependencies is good.

Actually the main thing that causes confusion for me is the 2 sources of requirements - https://github.com/codeforIATI/iati-datastore/blob/main/iati_datastore/setup.py and https://github.com/codeforIATI/iati-datastore/blob/main/requirements.in and I would like to discuss if the setup.py one is needed, and if not, can we switch to just requirements.in