upgrade wagtail to patch version to remediate snyk vulnerability

[pkfec]

Summary

This PR upgrade wagtail to a patch version 7.0.9 to remediate snyk vulnerability

• Resolves [Snyk:High]Wagtail Improper Handling of Insufficient Permissions or Privileges (Due:10/08/2026) #7224

Required reviewers

1 developer

Screenshots

Before:

How to test

• run: git checkout develop
• run: pyenv activate <existing cms virtual env>
• run: snyk test --file=requirements.txt (Terminal output shows wagtail as vulnerable package)
• run: pyenv virtualenv <create new cms virtual env>
• run: pyenv activate <new cms virtual env>
• run: git checkout feature/7224-upgrade-wagtail
• run pip install -r requirements.txt
• run pip install -r requirements-dev.txt
• run `snyk test --file=requirements.txt (Terminal output no longer shows wagtail as vulnerable package)
• run cd fec
• run ./manage.py runserver (test the cms app)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 82.10%. Comparing base (bc9c443) to head (06704c7).

Additional details and impacted files

@@           Coverage Diff            @@
##           develop    #7227   +/-   ##
========================================
  Coverage    82.10%   82.10%           
========================================
  Files          256      256           
  Lines         7082     7082           
========================================
  Hits          5815     5815           
  Misses        1267     1267           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.