chore: hold starlette at <1.4 in dependabot, with the fastapi hold (#1362)