Opt into FromPyObject derive for Clone pyclasses under PyO3 0.29

The pyo3 0.29 bump (#89) updated the dependency but didn't address 0.29's
deprecation of the *automatic* `FromPyObject` derive for `#[pyclass]` types
that implement `Clone`, which `cargo clippy -D warnings` rejects.
`ComponentGraphConfig` and `FormulaOverrides` are both extracted from Python
by value (`config.extract::<ComponentGraphConfig>()` and the by-value
`Option<FormulaOverrides>` argument), so opt back in explicitly with
`#[pyclass(from_py_object)]` to preserve the previous behavior.

The 0.29 bump itself also pulled in the fix for the out-of-bounds read in
list/tuple iterator `nth`/`nth_back` (GHSA-36hh-v3qg-5jq4); note it under
Upgrading.

Signed-off-by: Sahas Subramanian <sahas.subramanian@proton.me>

Author: shsms

RELEASE_NOTES.md

@@ -6,7 +6,7 @@
 
 ## Upgrading
 
-<!-- Here goes notes on how to upgrade from previous versions, including deprecations and what they should be replaced with -->
+- Bumped PyO3 to 0.29 to pull in the fix for RUSTSEC out-of-bounds read advisory GHSA-36hh-v3qg-5jq4 (`nth`/`nth_back` on list/tuple iterators).
 
 ## New Features
 

src/graph.rs

@@ -16,7 +16,7 @@ use pyo3::{
     types::{PyAny, PySet, PyType},
 };
 
-#[pyclass(subclass)]
+#[pyclass(subclass, from_py_object)]
 #[derive(Clone, Default, Debug)]
 pub struct ComponentGraphConfig {
     config: cg::ComponentGraphConfig,
@@ -60,7 +60,7 @@ impl ComponentGraphConfig {
     }
 }
 
-#[pyclass(subclass)]
+#[pyclass(subclass, from_py_object)]
 #[derive(Clone, Default, Debug)]
 pub struct FormulaOverrides {
     overrides: cg::FormulaOverrides,