Pin all dependencies (#84)

Our current install process is with pip in `install.sh`. `install.sh`
makes for an easy installation process, but using pip can mean that
users can get different installations of dbt-mcp. The best way to fix
this would be to install the app from the `uv.lock` file, not with pip.
However, this would require that users have uv installed. In the future,
we can use [uv
export](https://github.com/astral-sh/uv/issues/12584?utm_source=chatgpt.com)
and install from pylock.toml with pip, but [that isn't supported
yet](pypa/pip#13334). In the meantime, pinning
all dependencies should help provide for a more consistent install.

Author: DevonFulcher

pyproject.toml

@@ -14,12 +14,13 @@ classifiers = [
   "Intended Audience :: Developers",
 ]
 dependencies = [
+  # Pinning all dependencies because this app is installed with pip
+  # and we want to have a consistent install as much as possible.
   "dbt-sl-sdk[sync]==0.11.0",
-  # We are using some internal functions, so pinning this dependency.
   "mcp[cli]==1.6.0",
-  "pandas>=2.2.3",
-  "python-dotenv>=1.0.1",
-  "requests>=2.32.3",
+  "pandas==2.2.3",
+  "python-dotenv==1.0.1",
+  "requests==2.32.3",
 ]
 [dependency-groups]
 dev = [