Replace docs/requirements.txt and .github/workflows/constraints.txt

Both these requirements files generate a lot of noise with dependabot PRs and they can easily be out of sync with the proper lock file.

I think we should replace them with proper poetry group dependencies.