debian.org-security-tracker.debian.org: add python3-lxml to Depends

With the OVAL code soon migrating to python3[0], we'll need python3-lxml
to be available.

[0] webmaster-team/webwml!740



Signed-off-by: Julien Cristau <jcristau@debian.org>