Add bandit suppressions to tracker functions

[SpecLad]

Motivation and context

Now that GHSA-wq36-mxf8-hv62 is fixed, it is actually safe to use jsonpickle in this context.

How has this been tested?

I manually tested TransT.

Checklist

• I submit my changes into the develop branch
• [ ] I have created a changelog fragment
• [ ] I have updated the documentation accordingly
• [ ] I have added tests to cover my changes
• [ ] I have linked related issues (see GitHub docs)

License

• I submit my code changes under the same MIT License that covers the project.
  Feel free to contact the maintainers if that's a concern.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[codecov-commenter]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 73.40%. Comparing base (d0e0359) to head (862229f).
Report is 1 commits behind head on develop.

Additional details and impacted files

@@           Coverage Diff            @@
##           develop    #9004   +/-   ##
========================================
  Coverage    73.39%   73.40%           
========================================
  Files          415      415           
  Lines        44192    44192           
  Branches      3859     3859           
========================================
+ Hits         32435    32439    +4     
+ Misses       11757    11753    -4     

Components	Coverage Δ
cvat-ui	77.38% <ø> (+0.01%)	⬆️
cvat-server	70.09% <ø> (ø)