[Security] Add ExpressionLanguage to require-dev.