Fix tox errors

1. Ignore base python conflict error

New version of tox (4.2.4?) fails if there is mismatch in spec
attributes [1]. We can change the base python to match with the test
envs, but it may make it inconvenient to setup local development env,
so just ignore the error to workaround the issue.

2. Allow running bash in bandit test

[1] tox-dev/tox#2824

tox.ini

@@ -5,6 +5,7 @@
 
 [tox]
 envlist = bandit, docs, flake8, mypy, py311
+ignore_base_python_conflict = True
 
 [testenv]
 basepython = python3
@@ -38,6 +39,7 @@ commands =
 basepython = python3
 skip_install = true
 deps = bandit
+allowlist_externals = /bin/bash
 commands =
     ; 0.0.0.0 is set in BaseConfiguration, which is ok for local dev and it
     ; will be replace with a specific host IP when deploy to a server. So, it