twine is only needed at release time, no need
for all developers or all test runs to install
this.
also, some requirement of twine needs a rust
compiler, so if there is no rust compiler,
automated runs will abort due to that.
including a setuptools security fix, see #7227
also:
- cosmetic change in development.txt to have same order
- removed exclusion of broken Cython release (outdated since long)
