Mergeback PR from private to public.

* Moving plugins infrastructure to edx-django-utils
This PR extracts the code that enables plugins in edx-platform and puts it in edx-django-utils. This is done to allow other IDAS to add plugin functionality.

PROD-1534 security fixes

Sustaining/security fixes 2

[BD-18] Disable django debug toolbar when running e2e tests

bump edx-enterprise to version 3.5.1

The Randomized Content Block XBlock only randomizes the selection of
the children blocks and has unpredictable randomization of
the order of the selected child blocks due to the usage of sets, which
are unordered, for storing the selected blocks. This becomes apparent
when all the available child blocks in a library are chosen for a
Randomized Content Block, to randomize just the order of the child
blocks and not just the selection of the blocks. The order of the
selected blocks ends up being similar for multiple learners.

This change modifies the XBlock to store the selected child blocks in
a list, instead of a set, after randomly shuffling them.

A new block structure transformer, ContentLibraryOrderTransformer has
been added to transform the order of the selected children XBlocks to
match the order of the selections made in the
ContentLibraryTransformer. This ensures that same correct randomized order
of blocks is also returned by the course blocks API.

[TNL-6993] [BD-29]: Handle edge case where dropdown values are not being indexed

AA-129: Resume Course data for Course Home MFE

Merge pull request #24747 from edx/testeng/bokchoy_auto_cache_update_e34fa8378a89018458ffa15b547cb9165ea6c00b

Bokchoy Testing DB Cache update

Adding format to metadata for use in Learning MFE

This effectively evaluates the flag outside of the context of a course.
This was previously available through `.is_enabled_without_course_context`,
which has been removed in favor of simply `is_enabled()`.

This was done to make the CourseWaffleFlag interface more uniform with
that of WaffleFlag and ExperimentWaffleFlag and eliminate unecessary
branching when handling CourseWaffleFlags.

For the Courseware MFE rollout experiment, we want users'
default buckets to be consistent across course runs.

ExperimentWaffleFlag advised that this could be done
by calling `.is_enabled(...)` without a course_key argument;
however, doing so breaks when uing the main_flag.BUCKET_NUM
scheme to apply bucket rules for a specific set of users
or courses.

This commit explicitly adds course-unaware-bucketing via
a new kwarg to ExperimentWaffleFlag.__init__ method.

Furthermore, it fixes ExperimentWaffleFlag.is_enabled(course_key=None)
to work as advertised, by means of calling
.is_enabled_without_course_context on its subordinate flags.

TNL-7405

Small PLS courseware banner fixes

- Hide the submit-button CTA link to reset dates in the mobile
  app. They are working on their own solution.
- Don't show the dates_banner.html code in the courseware. It has
  new CTA banner support with updated wording.

Python Requirements Update

EDUCATOR-5031: Delete 'Student State' for all team members (Part 2): Delete team member student module (#24187)

reset student module for teams

- Originally pinned in PR #23566
- pytest was unpinned in PR #24717 and upgraded to v6+

Warn if an xblock defines is_past_due as a property

We support it still, but want to encourage folks to try to define it
as a method, so that in the future, we can rely on it being one.

Also updates lti-consumer to a version that has the value as a
method.

Merge pull request #24726 from edx/testeng/bokchoy_auto_cache_update_a08ab65fb2ff817af6902123a1310faea4933405

Bokchoy Testing DB Cache update