Align requirements.txt pins with what SeedSigner OS ships

SeedSigner OS installs these dependencies as buildroot packages with
their own pinned, hash-verified versions -- requirements.txt only
governs dev and desktop environments. Two entries had drifted from
what actually runs on devices, so dev setups were exercising
different code than the hardware. The OS versions are definitive.

qrcode moves from 7.3.1 to 8.0 to match buildroot's python-qrcode.
The major bump is safe for us: everything helpers/qr.py touches
(QRCode, ERROR_CORRECT_L, StyledPilImage, the module drawers) works
unchanged under 8.0, and devices have been running it all along.

urtypes moves from PyPI 1.0.1 to a commit pin of selfcustody/urtypes
v0.1.0, the tag the OS builds from GitHub. This is a downgrade -- dev
environments were ahead of the hardware, not behind it. PyPI only
publishes 1.0.0 and 1.0.1, so matching the OS exactly requires a git
pin, in the same style as the existing pyzbar entry.

embit and Pillow already matched, and the pyzbar commit pin is
already identical to the OS's v0.1.9-ss tag, so those are unchanged.

requirements.txt

@@ -1,5 +1,5 @@
 embit==0.8.0
 Pillow==10.3.0
 pyzbar @ git+https://github.com/seedsigner/pyzbar.git@c3c237821c6a20b17953efe59b90df0b514a1c03
-qrcode==7.3.1
-urtypes==1.0.1
+qrcode==8.0
+urtypes @ git+https://github.com/selfcustody/urtypes.git@7fb280eab3b3563dfc57d2733b0bf5cbc0a96a6a