Do we need urllib3 in our dependencies?

[shreyb]

We've gotten a couple of dependabot alerts regarding urllib3, including https://github.com/fermitools/Ferry-CLI/security/dependabot/10

Looking at the code, we may not even use urllib3 directly, so we should look into if we can just remove the dependency altogether.