[Security] remove ujson package (CVE-2022-31116, CVE-2022-31117, CVE-2021-45958)

[PatStLouis]

https://security.snyk.io/package/pip/ujson

[WadeBarnes]

@PatStLouis, Please rebase this PR now that your fix for the failed action has been merged. Thanks

[crajapakshe]

@PatStLouis Here is the some notes for remediation process.

[PatStLouis]

@crajapakshe pysha3 is a separate package, and we won't likely be able to update this package in a timely manner as there is some breaking changes introduced in >=1.0. Current installations use version 0.2.1.